Senior Security Engineer, Vulnerability Management

📋 Description

• Monitor and triage findings from Wiz, Tenable, GHAS, and others; assign priority.
• Run centralized VM platform; normalize data and map ownership.
• Manage VM risk scoring and SLA models; track overdue findings and top assets.
• Work with code, cloud, and endpoint teams to translate findings into remediation plans.
• Partner with engineering to ship fixes; participate in triage sessions and close in source tools.
• Improve VM processes and tools (connectors, data quality checks, scorecards, runbooks).

🎯 Requirements

• 6+ years in security engineering, vulnerability management, or security operations.
• Hands-on experience with VM stacks (Wiz, Tenable, Rapid7, GHAS, or similar).
• End-to-end VM workflows: scanning, triage, risk scoring, ticketing, validation, reporting.
• Cloud/infrastructure experience (AWS preferred); map services/hosts/containers to teams.
• Strong written and verbal communication; explain vulnerabilities and SLAs to technical and non-technical stakeholders.
• Experience with regulated environments (FedRAMP, PCI, SOC2) and audits.

🎁 Benefits

• Healthcare and family-building benefits; flexible time off; wellness stipend.
• Catered lunches daily and fully stocked kitchens.
• Learning stipends and reimbursement programs.
• 401(k) retirement plan with employer match; CLEAR Plus membership.