Lead Engineer, Vulnerability & Exposure Automation

Danaher Corporation; Kraków; On-site; PLN 240,000 - 360,000; Full time

Job summary

Danaher is seeking a Lead Engineer in Kraków to own engineering for vulnerability and exposure management. The role drives data ingestion, prioritization, and automation across cloud, endpoint, app, and remediation teams, reporting to the Senior Manager of Exposure Management.

You will build and refine pipelines, implement prioritization logic, and contribute to sustaining CTEM operations with data quality checks and runbooks.

Qualifications

• 5+ years of experience in vulnerability management or security engineering.
• Hands-on experience engineering vulnerability/exposure tooling and automation.
• Experience building automation and integrations across vulnerability, ticketing, and data sources.
• Knowledge of risk-based prioritization beyond CVSS using EPSS and CISA KEV.

Responsibilities

• Engineer scan coverage, data ingestion/normalization, prioritization logic, ticketing, and reporting pipelines.
• Build automation (Python/SQL/APIs) for prioritization, SLA logic, exception processes, and validation.
• Contribute to the CTEM operating-model design owned by the Global Lead; implement and refine it.
• Support the sustainability model: pipeline runbooks, data-quality checks, and service-ownership mapping.

Skills

Vulnerability management

Security engineering

Automation

Python

SQL

REST APIs

Threat intelligence

Education

Bachelor’s degree in Cybersecurity, CS, IT, or Engineering

Tools

CrowdStrike CCFA

Tenable VM

Qualys VMDR

GIAC GSEC/GMON

Defender

ServiceNow

Jira

Job description

Danaher is seeking a Lead Engineer in Kraków to own engineering for vulnerability and exposure management. The role drives data ingestion, prioritization, and automation across cloud, endpoint, app, and remediation teams, reporting to the Senior Manager of Exposure Management.

You will build and refine pipelines, implement prioritization logic, and contribute to sustaining CTEM operations with data quality checks and runbooks.