Senior Security Engineer, CTEM & Vulnerability Automation

Linuxconfig; United States; Remote; USD 134,000 - 181,000; Full time

Job summary

Recursion is seeking a Senior Engineer for Exposure & Vulnerability Management. You will design multi-agent systems to move vulnerabilities from discovery to verified closure with gates, audit trails, and rollback.

You’ll shift from periodic scans to continuous, risk-based exposure management across cloud, on-prem, and applications. Join a Security team focused on CTEM, risk prioritization, and compliant security practices, collaborating with Engineering, IT, and DevOps to reduce attack surface

Qualifications

• Bachelor's or Master's in CS/InfoSec or equivalent practical experience.
• 7+ years in vulnerability/exposure management or related security domains.
• Experience building AI/LLM-based agents or multi-agent workflows for security.
• Hands-on with CI/CD, automation, and remediation orchestration.

Responsibilities

• Design and deploy multi-agent systems for exposure from discovery to closure with gates and audit trails.
• Build engines that prioritize exposures using real-time context and threat intel.
• Automate verification to reduce alert noise and focus on real issues.
• Lead CTEM strategy across cloud, on-prem, and applications.
• Architect cloud-native discovery, asset inventory, and remediation workflows with IaC integration.
• Collaborate with Engineering/IT to embed secure-by-default practices and remediation timelines.
• Define KPIs and KRIs to measure control effectiveness and drive improvements.
• Support SOC2 and compliance by designing exposure and vulnerability controls.

Skills

Python

Go

Java

CI/CD

Threat intel

Cloud security

Kubernetes

Scripting

Education

Bachelor's or Master's in CS/InfoSec

Tools

Tenable

Qualys

Rapid7

Terraform

CloudFormation

SBOMs

SCA/SAST

Job description

Recursion is seeking a Senior Engineer for Exposure & Vulnerability Management. You will design multi-agent systems to move vulnerabilities from discovery to verified closure with gates, audit trails, and rollback.

You’ll shift from periodic scans to continuous, risk-based exposure management across cloud, on-prem, and applications. Join a Security team focused on CTEM, risk prioritization, and compliant security practices, collaborating with Engineering, IT, and DevOps to reduce attack surface