Security Engineer: Exposure & Vulnerability Mgmt

Fluidstack; Seattle (WA); Vor Ort; USD 224.000 - 275.000; Vollzeit

Zusammenfassung

Fluidstack in Seattle, WA is hiring for a security-focused role to own exposure and vulnerability management across a large compute fleet. You will build pipelines, automate scanners, and drive remediation end-to-end in a fast-paced AI infrastructure environment.

We expect experience in vulnerability management engineering, Python automation, and coordinating cross-team remediation at scale. Competitive comp is offered with a transparent pay range.

Qualifikationen

• You've built vulnerability management as an engineering problem: pipelines, automation, and integrations rather than spreadsheet triage.
• You write production-quality automation (Python or similar) and have wired scanners, asset systems, and ticketing into something coherent.
• You've run prioritization that survives contact with reality: KEV, EPSS, reachability, and the judgment to overrule all three.
• You've fixed vulnerabilities yourself, in someone else's codebase or infrastructure, and your pull requests got merged because they were good, not because security demanded it.
• You've driven remediation at scale through teams that don't report to you and kept SLAs credible without burning the relationships.
• You've stood up firmware or GPU stacks or data center equipment and stand up a defensible assessment approach.
• You've managed external attack surface coverage on endpoints and third-party software, shadow apps and extensions.

Aufgaben

• Own exposure and vulnerability management across the estate: external attack surface, cloud and Kubernetes, corporate endpoints, network infrastructure, and the bare-metal fleet beneath them.
• Extend exposure and vulnerability management across the corporate fleet (macOS, Windows, Linux): OS and application patch posture, first-party and third-party software, and drift from approved baselines.
• Cover software outside our managed catalogs: unmanaged apps and SaaS, and extensions. Identify it, assess it, and drive remediation or removal.
• Build the engineering that makes it work: asset inventory, scanner orchestration, deduplication, and prioritization built on reachability and real-world exploitation rather than raw CVSS.
• Engineer remediation into the workflows teams already use, so findings land as owned tickets, fixes ride existing pipelines, and closure verifies automatically.
• Remediate alongside the teams that own the systems: write the patch PR, harden the base image, fix the IaC module, and ship the config change.
• Extend the program past where enterprise playbooks run out: BMC and device firmware, GPU drivers, host images at fleet scale, and the long tail of data center equipment.
• Run intake for pen test findings and external reports, and report exposure honestly: what's reachable, what's exploited in the wild, what's accepted and by whom.

Kenntnisse

Vulnerability management

Automation (Python)

Scanner integrations

Risk prioritization

PR and code reviews

Firmware / GPU stacks

Data center security

Tools

Python

Jobbeschreibung

Fluidstack in Seattle, WA is hiring for a security-focused role to own exposure and vulnerability management across a large compute fleet. You will build pipelines, automate scanners, and drive remediation end-to-end in a fast-paced AI infrastructure environment.

We expect experience in vulnerability management engineering, Python automation, and coordinating cross-team remediation at scale. Competitive comp is offered with a transparent pay range.