Lead Vulnerability & Exposure Engineer | Automation & Cloud

Danaher; Poland; On-site; PLN 180,000 - 280,000; Full time

Job summary

Danaher is seeking a Lead Engineer, Vulnerability & Exposure Management, to own engineering implementations within the CTEM program at the Kraków site. You will build and optimize scanning, ingestion, normalization, prioritization, ticketing, and reporting pipelines, collaborating with cloud, endpoint, app, and remediation teams.

The role emphasizes hands-on tooling, automation via Python/SQL/APIs, and risk-based prioritization using threat intel.

Qualifications

• 5+ years of experience in vulnerability management or security engineering.
• Hands-on experience engineering vulnerability/exposure tooling (such as Tenable, Qualys, Rapid7, CrowdStrike FEM, or Defender), including scan coverage, authenticated scanning, and data normalization.
• Experience building automation and integrations (such as Python, SQL, and REST APIs) across vulnerability, ticketing (e.g., ServiceNow/Jira), and cloud or endpoint data sources.
• Experience applying risk-based prioritization beyond CVSS using threat intelligence such as EPSS and CISA KEV and asset context.

Responsibilities

• Engineer scan coverage, data ingestion/normalization, prioritization logic, ticketing, and reporting pipelines.
• Build automation (Python/SQL/APIs) for prioritization, SLA logic, exception processes, and validation.
• Contribute to the CTEM operating-model design owned by the Global Lead; implement and refine it.
• Support the sustainability model: pipeline runbooks, data-quality checks, and service-ownership mapping.

Skills

Vulnerability management

Security engineering

Automation

Python

SQL

REST APIs

Threat intelligence

Education

Bachelor's degree in Cybersecurity/CS/IT/Engineering

Tools

Tenable

Qualys

CrowdStrike FEM

Rapid7

Microsoft Defender

Job description

Danaher is seeking a Lead Engineer, Vulnerability & Exposure Management, to own engineering implementations within the CTEM program at the Kraków site. You will build and optimize scanning, ingestion, normalization, prioritization, ticketing, and reporting pipelines, collaborating with cloud, endpoint, app, and remediation teams.

The role emphasizes hands-on tooling, automation via Python/SQL/APIs, and risk-based prioritization using threat intel.