Vulnerability & Exposure Management Engineer

Team: IT

Location: US

Commitment: Full-time

Workplace Type: remote

Accountabilities:

The Vulnerability & Exposure Management Engineer will design, implement, and improve security capabilities that help teams identify and reduce exposure risks. This role requires strong technical execution, automation skills, and the ability to translate security findings into practical engineering actions.

• Build and operate vulnerability and exposure management solutions focused on identifying and reducing exploitable risks across applications, cloud environments, and infrastructure.
• Develop automation, workflows, and integrations that collect, normalize, prioritize, and operationalize vulnerability data from multiple security sources.
• Create engineer-facing dashboards and tools that improve visibility into security risks and enable faster remediation.
• Partner with engineering and product teams to evaluate vulnerabilities, explain exploitability and business impact, and recommend effective mitigation strategies.
• Integrate vulnerability insights into engineering workflows, including CI/CD pipelines, pull requests, and development backlogs.
• Validate remediation activities and ensure security improvements meaningfully reduce organizational exposure.
• Translate security and compliance requirements into scalable technical solutions supporting regulatory assessments.
• Support security audits and compliance initiatives by providing technical evidence and validating remediation outcomes.
• Improve vulnerability management processes, tooling, and automation to increase efficiency and effectiveness.
• Contribute technical expertise to security projects involving cloud security, application security, and security data platforms.

Requirements:

The ideal candidate combines strong vulnerability management expertise with engineering skills, automation capabilities, and the ability to collaborate effectively across technical teams.

• Proven experience in vulnerability management, application security, or related cybersecurity disciplines, with hands-on experience assessing and prioritizing security findings.
• Strong programming or scripting experience using languages such as Python or Go to automate security workflows and improve operational efficiency.
• Experience working with application security, cloud security, and container security across AWS and/or Azure environments.
• Solid understanding of security frameworks and controls such as NIST, CIS, and FedRAMP, with the ability to apply them in practical engineering contexts.
• Ability to assess vulnerabilities beyond severity scores by evaluating exploitability, exposure, and potential business impact.
• Experience collaborating with engineering teams to support remediation efforts and improve security adoption.
• Familiarity with commercial security tools, including SAST, SCA, cloud security platforms, and the ability to critically interpret their findings.
• Strong communication skills with the ability to explain technical risks and recommendations to both technical and non-technical audiences.
• Experience working in fast-moving environments where priorities evolve and independent execution is essential.
• Experience building security automation, data pipelines, or custom tooling to improve vulnerability visibility and prioritization is preferred.
• Exposure to regulated industries, healthcare security requirements, or compliance-driven environments is a plus.
• Familiarity with CI/CD security integrations, cloud security platforms, security data tools, and AI-assisted development tools is advantageous.

Benefits:

• Competitive total cash compensation range of $152,000 – $185,000 USD, depending on experience, skills, responsibilities, and role level.
• Opportunity to work on impactful cybersecurity initiatives supporting secure and reliable healthcare data systems.
• Collaborative, high-performance environment focused on innovation, ownership, and continuous improvement.
• Comprehensive rewards strategy designed to recognize contributions in a high-growth technology organization.
• Inclusive workplace culture committed to diversity, belonging, and equal opportunity.
• Support for professional growth through exposure to modern security technologies and complex technical challenges.
• Remote work flexibility with opportunities to collaborate across distributed teams.
• Health and wellness support, including benefits designed to support employees and their families.
• Additional employee programs and resources aligned with long-term career development.