Security Engineer, Vulnerability Management

About the role

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Engineer, Vulnerability Management based in the United States.

The Security Engineer, Vulnerability Management will build and operate a comprehensive vulnerability management and security operations program for a growing technology platform. In this role, you will take ownership of identifying security weaknesses across production environments and ensuring that appropriate fixes are delivered quickly and effectively. You will establish the tools, workflows, and automation needed to strengthen security while supporting the pace of engineering development. Working closely with engineering and compliance teams, you will turn technical findings into actionable priorities and measurable risk reduction. You will also develop reporting capabilities that help technical teams and leadership understand the organization's security posture. This is an opportunity to shape an evolving security program within a small, collaborative team and make a direct impact on customer trust and data protection.

Accountabilities -

Select, deploy, and operationalize vulnerability scanning tools across production assets and infrastructure.

-

Own the end-to-end vulnerability management lifecycle, including finding triage, severity assessment, ownership assignment, remediation timelines, and reporting.

-

Evaluate vulnerabilities in their specific operating context, using industry-standard scoring frameworks alongside business impact and actual exposure.

-

Develop engineering-focused triage and remediation workflows that integrate naturally into existing development processes.

-

Automate vulnerability routing, follow-up, and remediation tracking to help engineering teams resolve issues efficiently.

-

Build and maintain remediation dashboards that provide engineering teams and leadership with clear visibility into security risks and progress.

-

Partner with compliance teams to automate the collection and organization of vulnerability management evidence required for audits and compliance programs.

-

Develop automation, including AI-agent-based tools where appropriate, to reduce manual security operations work and support organizational growth.

-

Continuously improve vulnerability management processes, tooling, and reporting as the platform and production environment evolve.

Requirements:

-

At least 5 years of experience in security engineering, security operations, or software engineering, with a significant focus on security.

-

Hands-on experience building or operating a vulnerability management program or implementing software security tooling.

-

Familiarity with security scanning technologies, including software composition analysis (SCA), container, cloud, or host scanning.