Senior Security Engineer, Vulnerability & Exposure Management
Skills
- Deep knowledge of vulnerability classes across infrastructure, cloud, and applications.
- Experience with offensive techniques, exploitation, incident response, or penetration testing to assess real-world exploitability.
- Ability to validate findings beyond scanner output and collapse duplicates to reduce noise.
- Experience integrating data from multiple security and asset sources and engineering scalable automation.
- Strong written and verbal communication skills for explaining risk to engineers and non-security stakeholders.
Responsibilities
- Own the end-to-end vulnerability and exposure management program from detection through remediation and risk acceptance.
- Validate and triage findings via technical analysis and hands-on validation where appropriate.
- Enrich vulnerability data with asset context, threat intelligence, and exploitability to reduce noise and improve signal quality.
- Prioritize vulnerabilities using a consistent risk methodology accounting for asset criticality, exposure, exploitability, and compensating controls.
- Collaborate with application and service owners to drive remediation, risk acceptance, or compensating controls.
- Provide context and prioritization guidance to detection and response teams for zero-days and emerging high-risk exposures.
- Design and engineer automation and integrations to scale vulnerability ingestion, enrichment, and risk scoring.
Education
- Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent experience preferred.
- Advanced degree in a relevant field or equivalent professional experience is a plus.
Benefits
- Competitive compensation including base and discretionary bonus (range $335k–$475k).
- Fully remote flexibility within the United States.
- Comprehensive health, dental, and vision benefits.
- Retirement and savings plans.
- Professional development and growth opportunities within a high-performing culture.
Average salary estimate
If an employer mentions a salary or salary range on their job, we display it as an "Employer Estimate". If a job has no salary data, Rise displays an estimate if available.
Experienced systems engineers are sought to design and integrate enterprise IT systems for Navy LVC environments, supporting system implementation, testing, and performance analysis.
AbbVie is hiring a Senior Application Security Engineer to lead implementation and integration of application security tooling and DevSecOps practices for development teams across the organization.
Crusoe is seeking a Senior Systems Engineer - IAM to lead Okta-based identity lifecycle, automation, and secure access integrations for its global technology infrastructure in San Francisco.
Support and optimize critical clinical and enterprise applications in a fast-paced healthcare IT environment, translating business needs into reliable technical solutions.
Lead the automation and governance of Aledade’s Google Workspace and GCP environments, driving IaC, API-driven tooling, and audit-ready security practices.
Contribute to healthcare application delivery as an Associate Technical Analyst by converting business needs into clear technical requirements, supporting testing, defect management, and system improvements.
Experienced Workday Developer needed to lead integrations and reporting workstreams for Daikin Applied’s Workday platform in a hybrid/remote role supporting manufacturing HR systems.
Daikin Applied seeks an experienced Workday Developer to design, implement, and maintain integrations and advanced reporting for its manufacturing HR systems.
Lead Hadrian’s IT service desk to deliver reliable, user-focused support, manage escalations and on-call incidents, and drive a shift-left, self-service support strategy.
Provide white-glove technical support to senior leadership at RRS Group, ensuring secure, reliable devices and flawless meeting/AV experiences across office, remote, and travel settings.
Lead and inspire a web technologies team at Fortune Brands to deliver enterprise e-commerce and digital experiences using modern web stacks and best practices.
Lead an Agile delivery team to modernize a legacy SharePoint environment into SharePoint Online and implement Power Platform solutions for KBR’s MILSATCOM program in El Segundo, CA.
Serve as the technical lead in Athletics IT to design, implement, and secure AI-enabled workflows and integrations that improve operations while maintaining campus security standards.
🔮
Hi, I'm Risa! Your AI Career Copilot
you, just ask me below!
