Lead Security Engineer - Attack Surface & Automation

Wellington Management Company LLP; United States; Hybrid; USD 150,000 - 210,000; Full time

Job summary

Wellington Management Company LLP is seeking a Lead Security Engineer to minimize attack surfaces via vulnerability management, cloud assessments, threat intel, and policy automation. You will partner with CI/CD teams, mentor peers, and drive hardening baselines across the firm.

You will work with CNAPP and vulnerability tools (e.g., WIZ CNAPP, Qualys), automate workflows with Python, and coordinate with Third-Party Risk. Hybrid in-office and remote work supports a flexible security posture.

Qualifications

• BS degree in Information Systems or related discipline or equivalent IT work experience.
• Experience communicating security risk to stakeholders.
• Experience developing and maturing security baselines and processes.

Responsibilities

• Perform vulnerability and misconfiguration assessments and communicate risk to stakeholders.
• Leverage CNAPP tooling to assess findings and guide application custodians.
• Serve as security liaison across SDLC and CI/CD pipelines to secure code.
• Lead urgent vulnerability responses and misconfiguration events.
• Automate workflows with scripting and AI to shorten output times.
• Develop internal security baselines aligned with CIS Controls and threats.
• Stay current on cyber threats and map them to the attack surface.
• Review threat intel sources for vulnerabilities and vendor exposures.
• Collaborate with Third-Party Risk to assess vendor exposure to critical flaws.
• Contribute to team and firmwide documentation and policy development.

Skills

Self-motivation

Communication skills

Mentoring

Global collaboration

Curiosity

Education

BS in Information Systems or related discipline

Tools

WIZ CNAPP

Qualys

Python scripting

IaC (AWS)

Splunk

JFrog Artifactory

JFrog Curation

ServiceNow

AWS Services

MS Azure

MS Intune

Anthropic Claude

Job description

Wellington Management Company LLP is seeking a Lead Security Engineer to minimize attack surfaces via vulnerability management, cloud assessments, threat intel, and policy automation. You will partner with CI/CD teams, mentor peers, and drive hardening baselines across the firm.

You will work with CNAPP and vulnerability tools (e.g., WIZ CNAPP, Qualys), automate workflows with Python, and coordinate with Third-Party Risk. Hybrid in-office and remote work supports a flexible security posture.