Security Engineer, Vulnerability Management

Accountabilities: Select, deploy, and operationalize vulnerability scanning tools across production assets and infrastructure. Own the end-to-end vulnerability management lifecycle, including finding triage, severity assessment, ownership assignment, remediation timelines, and reporting. Evaluate vulnerabilities in their specific operating context, using industry-standard scoring frameworks alongside business impact and actual exposure. Develop engineering-focused triage and remediation workflows that integrate naturally into existing development processes. Automate vulnerability routing, follow-up, and remediation tracking to help engineering teams resolve issues efficiently. Build and maintain remediation dashboards that provide engineering teams and leadership with clear visibility into security risks and progress. Partner with compliance teams to automate the collection and organization of vulnerability management evidence required for audits and compliance programs. Develop automation, including AI-agent-based tools where appropriate, to reduce manual security operations work and support organizational growth. Continuously improve vulnerability management processes, tooling, and reporting as the platform and production environment evolve. Requirements: At least 5 years of experience in security engineering, security operations, or software engineering, with a significant focus on security. Hands-on experience building or operating a vulnerability management program or implementing software security tooling. Familiarity with security scanning technologies, including software composition analysis (SCA), container, cloud, or host scanning. Strong understanding of vulnerability triage and remediation, with an engineering-first mindset focused on making security fixes practical and easy to implement. Ability to assess the real-world severity of security findings within a specific environment, using CVSS and other relevant risk factors. Strong scripting and automation skills in a language such as Go or Python. Ability to read and understand infrastructure-as-code configurations, particularly Terraform. Pragmatic risk management skills, including the ability to explain technical vulnerabilities in terms of business impact and remediation urgency. Clear communication skills and the ability to translate complex security issues into actionable guidance for engineering teams. Adaptability, initiative, and comfort working in an evolving environment with a high degree of ownership. Preferred: Experience with real-time media, networking, or WebRTC systems. Preferred: Experience supporting compliance audits or frameworks such as HIPAA, PCI-DSS, ISO 27001, or SOC 2. Preferred: Background in incident response or application security. Preferred: Experience with AI security, including securing large language model applications or agent infrastructure. Benefits: Annual compensation range of $200,000–$300,000 USD, depending on location, seniority, and technical expertise. Equity package. Health, dental, and vision insurance. Flexible vacation policy. Opportunity to contribute to impactful technology and open-source projects. Opportunity to work alongside experienced engineers in a globally distributed, remote-first environment.