Vulnerability Management Engineer

Backblaze; Poza Rica; In loco; MXN 550.000 - 900.000; Tempo pieno

Descrizione del lavoro

Backblaze is seeking a Vulnerability Management Engineer to drive risk-based vulnerability and exposure management across infrastructure, applications, cloud services, endpoints, and dependencies. You will determine reachability and exploitability, prioritize with context, and guide remediation with AI-assisted analysis.

The role collaborates with Red Team and security teams to validate exploits, deploy compensating controls, and automate vulnerability workflows for efficient risk reduction.

Competenze

• Experience with enterprise vulnerability or exposure management.
• Strong understanding of infrastructure, applications, cloud, containers, networking.
• Experience interpreting vulnerability intelligence and assessing practical exploitability.
• Knowledge of risk-based prioritization techniques including CVSS and environmental context.
• Experience correlating vulnerability, asset, configuration, SAST, DAST, SCA, or related data.
• Experience with scripting, automation, or data analysis.

Mansioni

• Correlate threat intelligence and vulnerability findings with asset inventory and configurations.
• Assess exploitability and reachability rather than relying on severity alone.
• Incorporate exploit prediction, known exploitation intelligence, and environmental context into prioritization.
• Determine whether exposure requires immediate incident response or remediation under objectives.
• Use AI-assisted workflows to ingest and correlate vulnerability data with the organization's tech setup.
• Partner with Red Team to validate practical exploitability of significant vulnerabilities.
• Identify compensating controls such as configuration changes or access restrictions when patching is impractical.
• Automate vulnerability ingestion, analysis, prioritization, remediation tracking, and verification where appropriate.

Conoscenze

Vulnerability management

Threat intelligence

Automation scripting

Cloud & containers

OWASP Top 10

MITRE ATT&CK

Data correlation

Strumenti

SAST tools

DAST tools

SCA tools

Descrizione del lavoro

About Backblaze

Backblaze is the object storage leader in the open cloud movement, fueling customer success with cloud storage built purposefully to unlock budgets, unburden administrators, and unleash innovators. Together with our partners, we’re helping customers break free from the restrictive, overpriced legacy solutions that hold them back, and blaze forward with the full power of the open cloud in their hands.

Founded in 2007, we scaled the business with less than $3 million in outside funding until 2021, when we did a traditional IPO on the Nasdaq stock exchange. Today, Backblaze generates over $136M ARR and is the leading specialized storage cloud, managing over three billion gigabytes of data storage for 500K+ customers in 175+ countries, including businesses, developers, IT professionals, and individuals.

But while there is a lot to celebrate in our past, there is almost as much opportunity ahead of us. We’re seeking a Vulnerability Management Engineer to join our team!

About The Role

The Vulnerability Management Engineer drives risk-based vulnerability and exposure management across infrastructure, applications, cloud services, endpoints, and software dependencies. The role combines vulnerability data, asset and configuration intelligence, application-security testing, threat intelligence, and AI-assisted analysis to determine whether vulnerabilities are reachable, exploitable, and likely to represent an imminent organizational threat.

Key Responsibilities

• Correlate threat intelligence and vulnerability findings with asset inventory, software configuration, system configuration, application testing, network exposure, ownership, and business criticality.
• Assess exploitability and reachability rather than relying on vulnerability severity alone.
• Incorporate exploit prediction, known exploitation, open-source threat intelligence, adversary activity, and environmental context into prioritization.
• Determine whether exposure requires immediate incident response or remediation under established operational objectives.
• Use AI-assisted workflows to ingest and correlate vulnerability intelligence against the organization's actual technology configuration while independently validating conclusions.
• Partner with Red Team to validate practical exploitability of significant vulnerabilities.
• Identify compensating controls such as configuration changes, access restrictions, segmentation, or filtering when immediate patching is impractical.
• Automate vulnerability ingestion, analysis, prioritization, remediation tracking, mitigation, and verification where appropriate.

Qualifications

• Experience with enterprise vulnerability or exposure management.
• Strong understanding of infrastructure, applications, cloud, containers, networking, and software dependencies.
• Experience interpreting vulnerability intelligence and assessing practical exploitability.
• Knowledge of risk-based prioritization techniques including CVSS, exploit prediction, known-exploitation intelligence, and environmental context.
• Experience correlating vulnerability, asset, configuration, SAST, DAST, SCA, endpoint, or related security data.
• Experience with scripting, automation, or data analysis.
• Familiarity with continuous exposure management, attack-path analysis, AI-assisted analysis, or automated mitigation is preferred.
• Strong understanding of OWASP Top 10, MITRE ATT&CK, MITRE D3FEND, and STRIDE.
• Familiarity with OWASP Top 10 for LLM, OWASP Top 10 for Agentic Applications, MITRE ATLAS and MAESTRO.

We are proud to be an Equal Opportunity Employer.

At Backblaze, we value being fair and good to our customers, partners, and employees. That’s why diversity, equity, and inclusion are at the core of our values. We are committed to fostering a workforce where all employees feel a sense of belonging regardless of race, ethnicity, nationality, gender, sexual orientation, age, religion, socio-economic status, ability, veteran status, and education. We believe that our dedication to cultivating a diverse workspace not only allows us to better serve our customers in over 175 countries, but further reinforces our commitment to doing the right thing.

To understand more about the data we collect and process as part of your application, please view our Backblaze Employee Privacy Notice.