Vulnerability Risk Engineer — AI-Driven Cloud Security

Backblaze; Poza Rica; On-site; MXN 550,000 - 900,000; Full time

Job summary

Backblaze is seeking a Vulnerability Management Engineer to drive risk-based vulnerability and exposure management across infrastructure, applications, cloud services, endpoints, and dependencies. You will determine reachability and exploitability, prioritize with context, and guide remediation with AI-assisted analysis.

The role collaborates with Red Team and security teams to validate exploits, deploy compensating controls, and automate vulnerability workflows for efficient risk reduction.

Qualifications

• Experience with enterprise vulnerability or exposure management.
• Strong understanding of infrastructure, applications, cloud, containers, networking.
• Experience interpreting vulnerability intelligence and assessing practical exploitability.
• Knowledge of risk-based prioritization techniques including CVSS and environmental context.
• Experience correlating vulnerability, asset, configuration, SAST, DAST, SCA, or related data.
• Experience with scripting, automation, or data analysis.

Responsibilities

• Correlate threat intelligence and vulnerability findings with asset inventory and configurations.
• Assess exploitability and reachability rather than relying on severity alone.
• Incorporate exploit prediction, known exploitation intelligence, and environmental context into prioritization.
• Determine whether exposure requires immediate incident response or remediation under objectives.
• Use AI-assisted workflows to ingest and correlate vulnerability data with the organization's tech setup.
• Partner with Red Team to validate practical exploitability of significant vulnerabilities.
• Identify compensating controls such as configuration changes or access restrictions when patching is impractical.
• Automate vulnerability ingestion, analysis, prioritization, remediation tracking, and verification where appropriate.

Skills

Vulnerability management

Threat intelligence

Automation scripting

Cloud & containers

OWASP Top 10

MITRE ATT&CK

Data correlation

Tools

SAST tools

DAST tools

SCA tools

Job description

Backblaze is seeking a Vulnerability Management Engineer to drive risk-based vulnerability and exposure management across infrastructure, applications, cloud services, endpoints, and dependencies. You will determine reachability and exploitability, prioritize with context, and guide remediation with AI-assisted analysis.

The role collaborates with Red Team and security teams to validate exploits, deploy compensating controls, and automate vulnerability workflows for efficient risk reduction.