Vulnerability Management Engineer

About the role

We are seeking a consultative and hands-on Vulnerability Management (VM) Engineer to join our elite Delivery team. You will serve as the primary security advisor for an assigned portfolio of fast-growth startups, helping them identify, prioritize, and fix risks. In this role, you will seamlessly combine scanning infrastructure management with high-touch client advisory.

What you'll do

• Triage and Prioritize Code Vulnerabilities: Work through Dependabot alerts, code scanning results, and secret scanning alerts across client repositories
• Determine whether a vulnerable package or code path is reachable and exploitable in the client's application, dismiss false positives with documented rationale
• Own Remediation Pull Requests: Review, test, and merge Dependabot pull requests, and open your own for upgrades Dependabot cannot handle
• Apply straightforward code and configuration fixes directly, and give engineers clear written guidance on fixes that need design changes
• Work with client engineers through code review and release processes to meet a sub-30-day time-to-remediate target

What you need

• Vulnerability assessment
• CISA
• ISO 27001
• CEH
• Python
• AWS
• Any graduate

Good to have

• CI/CD
• Git
• GCP
• Azure
• Terraform
• JavaScript