Vulnerability Management Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Vulnerability Management Engineer driving risk-based exposure management across Backblaze’s open cloud storage infrastructure. Correlating threat intelligence, asset data, and exploitability to prioritize remediation.
Responsibilities:
- Drive risk-based vulnerability and exposure management across infrastructure, applications, cloud services, endpoints, and software dependencies
- Correlate threat intelligence and vulnerability findings with asset inventory, software and system configuration, application testing, network exposure, ownership, and business criticality
- Assess exploitability and reachability rather than relying on vulnerability severity alone
- Incorporate exploit prediction, known exploitation, open-source threat intelligence, adversary activity, and environmental context into prioritization
- Determine whether exposure requires immediate incident response or remediation under established operational objectives
- Use AI-assisted workflows to ingest and correlate vulnerability intelligence against the organization's technology configuration while independently validating conclusions
- Partner with Red Team to validate practical exploitability of significant vulnerabilities
- Identify compensating controls such as configuration changes, access restrictions, segmentation, or filtering when immediate patching is impractical
- Automate vulnerability ingestion, analysis, prioritization, remediation tracking, mitigation, and verification where appropriate
Requirements:
- Experience with enterprise vulnerability or exposure management
- Strong understanding of infrastructure, applications, cloud, containers, networking, and software dependencies
- Experience interpreting vulnerability intelligence and assessing practical exploitability
- Knowledge of risk-based prioritization techniques including CVSS, exploit prediction, known-exploitation intelligence, and environmental context
- Experience correlating vulnerability, asset, configuration, SAST, DAST, SCA, endpoint, or related security data
- Experience with scripting, automation, or data analysis
- Strong understanding of OWASP Top 10, MITRE ATT&CK, MITRE D3FEND, and STRIDE
- Familiarity with OWASP Top 10 for LLM, OWASP Top 10 for Agentic Applications, MITRE ATLAS and MAESTRO
- Familiarity with continuous exposure management, attack-path analysis, AI-assisted analysis, or automated mitigation is preferred
Benefits:
- Equal Opportunity Employer commitment
- Diversity, equity, and inclusion values
- Inclusive workplace where employees can express their true selves and do their best work
Similar Jobs
Senior Forward Deployed Engineer
Senior Forward Deployed Engineer building and deploying Databricks data and AI solutions for customers. Owning architecture, technical delivery, and customer-facing implementation across data engineering and ML/AI.
Staff Project Engineer – Grid Scale
Staff Project Engineer leading grid-scale power-system design and commissioning. Mainspring manufactures fuel-flexible, low-emissions local power solutions.
Lean Engineer, Formal Mathematics, Lean 4, Mathlib, Theorem Proving
Lean engineer writing and reviewing Lean 4 proofs for a leading AI lab. Formalizing mathematics and evaluating AI-generated theorem-proving outputs.
Propulsion & Effects Engineer
Propulsion and effects engineer creating dual-use safety prompts and evaluating frontier AI responses. Mercor uses expert panels to test AI misuse judgment.
Propulsion & Effects Engineer
Propulsion and effects engineer creating dual-use prompts and evaluating frontier AI model safety. Writing technical reference answers grounded in real propulsion and initiation-system expertise.
Prognostics and Health Management Engineer
PHM Engineer improving aircraft health management and reliability systems. Supporting NAVAIR, Department of Defense, and commercial customers through prognostics analyses and sustainment solutions.
Forward Deployed Engineer – Healthcare
Forward Deployed Engineer deploying Penguin Ai’s healthcare AI platform across payer, provider, and revenue-cycle workflows. Leading integrations, use-case design, training, and customer adoption.
Project Engineer – Point Cloud Processing
Engenheiro de projetos especializado em Laser Scanning e nuvens de pontos para FPSOs. Integrando tecnologias 3D e engenharia digital na SANDECH.
Senior Motion Planning Engineer – Safety Layer
Senior Motion Planning Engineer designing safety-layer algorithms for Motional’s autonomous vehicles. Developing evasive maneuvers, simulation tools, and fleet-wide safety metrics.
Mid-Level Geotechnical Engineer
Mid-Level Geotechnical Engineer designing foundations and subsurface systems for Sargent & Lundy’s power and infrastructure projects. Supporting solar, wind, battery storage, and industrial developments.
Escalator Engineer – Days
Escalator Engineer maintaining and repairing escalators and moving walkways for Stannah, a global lifts and access-equipment manufacturer. Covering Greater London rail, underground and airport transport sites.
Escalator Engineer – Nights
Escalator Engineer maintaining and repairing escalators across London rail stations, airport links and transport hubs. Supporting safe, reliable passenger infrastructure for Stannah, a family-owned engineering manufacturer.
Compiler Performance Engineer
Compiler Performance Engineer optimizing Azul's LLVM-based Falcon JIT compiler. Improving generated machine code and Java performance for enterprise workloads across India.
Senior Compiler Performance Engineer
Senior Compiler Performance Engineer improving Azul's Falcon JIT compiler and generated machine code. Designing optimizations and delivering measurable speedups across production Java workloads.
Staff Compiler Performance Engineer
Staff Compiler Performance Engineer setting performance strategy for Azul’s Falcon JIT compiler. Leading optimizations, architecture, hardware enablement, and LLVM contributions.
Senior Detection Engineer
Senior Detection Engineer strengthening SAIC’s enterprise cybersecurity defenses through Splunk, SIEM, EDR, and Python automation. Improving threat detection, incident response, and defensive operations for a mission technology integrator.
Professional Services Engineer
Professional Services Engineer implementing VidiNet media asset management solutions for customers. Configuring media workflows, integrations, APIs, and delivery systems across European remote locations.
Lift Engineer
Lift Engineer servicing, repairing, and troubleshooting lifts across Didcot and nearby areas for Stannah, a global mobility-equipment manufacturer. Managing a structured local route and maintaining safe, compliant sites.
Lift Repair Engineer
Lift Repair Engineer repairing, troubleshooting, and restoring lifts across Reading and surrounding areas. Maintaining Stannah’s residential, commercial, and public access systems.
Generator Modeling Engineer
Principal engineer overseeing renewable generator models, interconnection studies, and compliance for AES Clean Energy. Leading engineers and consultants across the project lifecycle.