Security Engineer, Exposure and Vulnerability Management
FluidStack — San Francisco, California, United States · In-Person · Senior
Role description
Role Overview
As a Security Engineer, you will own exposure and vulnerability management across the estate, building the entire security program from scratch and extending it across the corporate fleet. You will identify, assess, and drive remediation or removal of unmanaged apps and SaaS, package-level software on endpoints, and browser and IDE extensions.
What You Will Do
Your responsibilities will include building the engineering that makes it work, such as asset inventory, scanner orchestration, deduplication, and prioritization built on reachability and real-world exploitation. You will also engineer remediation into the workflows teams already use, and remediate alongside the teams that own the systems.
Why It Might Be a Fit
We are looking for someone who has built vulnerability management as an engineering problem, with experience in writing production-quality automation and running prioritization that survives contact with reality. You should be able to take a technology class most programs never touch and stand up a defensible assessment approach.
Requirements
- Built vulnerability management as an engineering problem
- Wrote production-quality automation (Python or similar)
- Ran prioritization that survives contact with reality
- Fixed vulnerabilities yourself, in someone else's codebase or infrastructure
- Drove remediation at scale through teams that don't report to you
- Can take a technology class most programs never touch and stand up a defensible assessment approach
Benefits
- Dental insurance
- Vision insurance
- Paid holidays
- Pay equity and transparency