Lead Security Engineer – Vulnerability Management

About the role

This role is designed for a lead cybersecurity engineer with approximately 8+ years of experience in vulnerability management, exposure management, offensive security, application security, and security automation. The position serves as a technical lead and subject-matter expert for the vulnerability management function, helping shape the roadmap and owning delivery of maturity initiatives from approach through measurable outcomes.

What you'll do

• Own end-to-end delivery of vulnerability management maturity projects, from defining the approach and success measures through implementation, adoption, and reporting
• Design and build automation and AI-assisted workflows for triage, enrichment, ticketing, and reporting that reduce manual effort and improve time to remediation
• Build and mature offensive security capabilities, including internal penetration testing, segmentation testing, purple-team exercises
• Evaluate and onboard new security capabilities, running proofs of concept and recommending adopt, extend, or retire decisions
• Define runbooks, quality standards, and handoff practices for operational work, and coach engineers as proven processes are scaled across teams

What you need

• Vulnerability assessment
• Penetration testing
• Python
• CISA
• LLMs
• API testing

Good to have

• CISSP
• ServiceNow
• Git
• IoT
• UVM
• REST APIs