Security Engineer: Exposure & Vulnerability Management

Fluidstack; Sacramento (CA); In loco; USD 140.000 - 210.000; Tempo pieno

Descrizione del lavoro

Fluidstack is seeking a security-focused professional to own exposure and vulnerability management across our estate and corporate fleet. You will build and operate automation pipelines (Python-based) that wire scanners, asset systems, and ticketing into a coherent workflow.

The role emphasizes prioritization using KEV/EPSS signals and real-world reachability, with cross-team remediation responsibility. You will extend the program to firmware, device fleets, and data center equipment, and drive

Competenze

• Experience building vulnerability management as an engineering problem.
• Production-quality automation in Python or similar.
• Ability to wire scanners, asset systems, and ticketing into a coherent workflow.
• Strong prioritization using KEV/EPSS signals and real-world reachability.
• Experience driving remediation at scale with cross-team collaboration.

Mansioni

• Own exposure and vulnerability management across the estate.
• Extend exposure management across the corporate fleet.
• Identify unmanaged apps and SaaS and drive remediation or removal.
• Build asset inventory, scanner orchestration, and prioritization.
• Integrate remediation into existing workflows and pipelines.
• Extend program to firmware and data center equipment.
• Lead intake for pen test findings and report exposure honestly.

Conoscenze

Vulnerability management

Python automation

Threat prioritization

Kubernetes

Cloud security practices

Strumenti

MDM

EDR

Scanner integrations

Descrizione del lavoro

Fluidstack is seeking a security-focused professional to own exposure and vulnerability management across our estate and corporate fleet. You will build and operate automation pipelines (Python-based) that wire scanners, asset systems, and ticketing into a coherent workflow.

The role emphasizes prioritization using KEV/EPSS signals and real-world reachability, with cross-team remediation responsibility. You will extend the program to firmware, device fleets, and data center equipment, and drive