Security Engineer, Vulnerability Management

Overview

Dropbox is seeking a Security Engineer, Vulnerability Management to own and scale our vulnerability management program. This is a full-time remote role focused on identifying, triaging, and remediating vulnerabilities to reduce risk across Dropbox infrastructure and products. The position is open to candidates in Remote locations, including Mexico City, Mexico.

Responsibilities

• Own and drive the vulnerability management program, including scanning, triage, remediation prioritization, and metrics
• Collaborate with Software Engineering, Security Operations, and IT teams to coordinate remediation efforts
• Assess risk of identified vulnerabilities and ensure timely remediation aligned with risk posture
• Configure, operate, and optimize vulnerability scanning tools and processes
• Track remediation SLAs, generate reports, and communicate progress to security leadership

Requirements

• Experience in vulnerability management or security engineering
• Strong understanding of risk scoring (e.g., CVSS) and remediation workflows
• Excellent cross-functional collaboration and communication skills
• Remote work capability; location in or near Mexico City, Mexico is acceptable
• Education: required; Employment: full-time

About Dropbox

Dropbox is a leading technology company focused on building tools that simplify how people work and collaborate. We value security, privacy, and innovative engineering to deliver reliable products to our users.