Remote Vulnerability Engineer - SaaS Security & Risk

Domino Data Lab; United States; On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Flexible work schedule

Remote-friendly

Job summary

Domino Data Lab is seeking a Senior Security Engineer to lead vulnerability management for our large SaaS platform. You will own CVSS scoring, triage findings, and work closely with engineering to drive timely remediation.

Ideal candidates have hands-on experience with container and OS security, scripting in Python, and familiarity with OWASP Top 10. This remote-friendly role partners with Security and Engineering to reduce risk across our cloud-native stack.

Qualifications

• Hands-on experience managing vulnerabilities for a large SaaS product across OS, container, and dependency exposure.
• Proven ability to triage CVEs, prioritize by severity, and track resolution.
• Experience reproducing and validating vulnerabilities from customer disclosures or pen tests.
• Familiarity with scanning tools and automation pipelines (SAST/DAST).

Responsibilities

• Own first-pass CVSS scoring and exploitability analysis, closing SLA gaps between finding and remediation.
• Reproduce and validate customer-reported and pen-test findings before escalation to engineering.
• Maintain and tune vulnerability scanning pipelines and automation tooling.
• Collaborate with Engineering to prioritize fixes and verify real exploitability.
• Contribute to risk assessments and remediation planning for a regulated SaaS environment.

Skills

Vulnerability management

CVSS scoring

Scripting (Python)

Kubernetes

AWS basics

OWASP Top 10

Threat modeling

Tools

Prisma Cloud

Twistlock

JFrog

Trivy

Burp Suite

Job description

Domino Data Lab is seeking a Senior Security Engineer to lead vulnerability management for our large SaaS platform. You will own CVSS scoring, triage findings, and work closely with engineering to drive timely remediation.

Ideal candidates have hands-on experience with container and OS security, scripting in Python, and familiarity with OWASP Top 10. This remote-friendly role partners with Security and Engineering to reduce risk across our cloud-native stack.