Senior Vulnerability Management Engineer | AI-Driven Remediation

640 Yahoo EMEA Limited; Ireland; Hybrid; EUR 73,000 - 121,000; Full time

Benefits offered by this job

Healthcare

Pension

Flexible benefits

Job summary

Yahoo is seeking a Senior Security Engineer to lead Vulnerability Management on a contract basis. This hybrid role focuses on identifying and driving remediation of high-severity vulnerabilities across cloud, host, and applications, coordinating with analysts, engineers, and leadership.

You will utilize Databricks to analyze large datasets, manage scanning platforms, and drive AI-assisted workflows for automated remediation.

Qualifications

• Bachelor's degree in a technical discipline or equivalent practical experience.
• 7+ years of information security experience in vulnerability management or security engineering.
• Proven experience applying risk-based prioritization using CVSS, EPSS, and KEV data.

Responsibilities

• Direct the coordination, assessment, communication, and remediation of high-severity security vulnerabilities.
• Prioritize vulnerabilities based on context, factors, threat intel feeds, KEV and EPSS data.
• Use Databricks to query and analyze large datasets to identify trends and inform leadership reporting.
• Oversee vulnerability scanning platforms, configure scanners, and manage vendor relationships.
• Perform vulnerability analysis and remediation across cloud, host, and application layers.
• Validate vulnerabilities through enterprise scanners, container tools, IaC templates, and code analysis.
• Design and optimize AI-driven vulnerability management workflows to automate remediation.
• Utilize AI tools for parsing, summarizing, and triaging data on threats and CVEs.
• Develop and maintain runbooks and operational documentation for vulnerability handling.
• Work with product teams and admins to explain risks and provide remediation guidance.
• Monitor vulnerability information sources and execute emergency response procedures.
• Lead SBOM data collection and supplier risk assessments across environments.
• Lead host OS and foundation-level remediation initiatives linked to PRs and tickets.
• Develop real-time dashboards and KPIs for vulnerability management.
• Participate in on-call rotations and after-hours support.

Skills

Vulnerability management

Security engineering

Python or Go

Databricks

EPSS/KEV/CVSS

Cloud security

Education

Bachelor's degree in Computer Science/Engineering/InfoSec

Tools

Tenable

Nexpose

Qualys

AWS Inspector

GCP SCC

GitHub Advanced Security

Job description

Yahoo is seeking a Senior Security Engineer to lead Vulnerability Management on a contract basis. This hybrid role focuses on identifying and driving remediation of high-severity vulnerabilities across cloud, host, and applications, coordinating with analysts, engineers, and leadership.

You will utilize Databricks to analyze large datasets, manage scanning platforms, and drive AI-assisted workflows for automated remediation.