Security Engineer, Vulnerability Management

The Security Engineer, Vulnerability Management will build and operate a comprehensive vulnerability management and security operations program for a growing technology platform. In this role, you will take ownership of identifying security weaknesses across production environments and ensuring that appropriate fixes are delivered quickly and effectively. You will establish the tools, workflows, and automation needed to strengthen security while supporting the pace of engineering development. Working closely with engineering and compliance teams, you will turn technical findings into actionable priorities and measurable risk reduction. You will also develop reporting capabilities that help technical teams and leadership understand the organization's security posture. This is an opportunity to shape an evolving security program within a small, collaborative team and make a direct impact on customer trust and data protection.

• At least 5 years of experience in security engineering, security operations, or software engineering, with a significant focus on security.

• Hands-on experience building or operating a vulnerability management program or implementing software security tooling.

• Familiarity with security scanning technologies, including software composition analysis (SCA), container, cloud, or host scanning.

• Strong understanding of vulnerability triage and remediation, with an engineering-first mindset focused on making security fixes practical and easy to implement.

• Ability to assess the real-world severity of security findings within a specific environment, using CVSS and other relevant risk factors.

• Strong scripting and automation skills in a language such as Go or Python.

• Ability to read and understand infrastructure-as-code configurations, particularly Terraform.

• Pragmatic risk management skills, including the ability to explain technical vulnerabilities in terms of business impact and remediation urgency.

• Clear communication skills and the ability to translate complex security issues into actionable guidance for engineering teams.

• Adaptability, initiative, and comfort working in an evolving environment with a high degree of ownership.

• Preferred: Experience with real-time media, networking, or WebRTC systems.

• Preferred: Experience supporting compliance audits or frameworks such as HIPAA, PCI-DSS, ISO 27001, or SOC 2.

• Preferred: Background in incident response or application security.

• Preferred: Experience with AI security, including securing large language model applications or agent infrastructure.