Senior Security Engineer: Exposure & Vulnerability Management

Fluidstack; New York (NY); On-site; USD 224,000 - 275,000; Full time

Job summary

Fluidstack in New York is seeking a security-focused engineer to own exposure and vulnerability management across our AI compute estate, including cloud, on-prem, and end-user endpoints. You will build automation, integrate scanners and ticketing, and drive remediation with cross-functional teams.

This role shapes a scalable, civilization-scale security program. You will work to close gaps rapidly, prioritizing risk with KEV/EPSS insights, and contribute to a culture of proactive defense in a

Qualifications

• You've built vulnerability management as an engineering problem: pipelines, automation, and integrations rather than spreadsheet triage.
• You write production-quality automation (Python or similar) and have wired scanners, asset systems, and ticketing into something coherent.
• You've run prioritization that survives contact with reality: KEV, EPSS, reachability, and the judgment to overrule all three.
• You've fixed vulnerabilities yourself, in someone else's codebase or infrastructure, and your pull requests got merged because they were good, not because security demanded it.
• You've driven remediation at scale through teams that don't report to you and kept SLAs credible without burning the relationships.
• You can take a technology class most programs never touch, firmware or GPU stacks or data center equipment, and stand up a defensible assessment approach instead of waiting for a vendor to sell you one.
• You've run vulnerability and exposure coverage on corporate endpoints and third-party software, including the unmanaged long tail of shadow apps, packages, and extensions.
• Bonus: External attack surface management platforms. Firmware or BMC security depth. CSPM/KSPM tooling. Exploit development or reachability validation. Endpoint management and patching tooling (MDM, EDR), software inventory, and extension and supply chain risk.

Responsibilities

• Own exposure and vulnerability management across the estate: external attack surface, cloud and Kubernetes, corporate endpoints, network infrastructure, and the bare-metal fleet beneath them.
• Extend exposure and vulnerability management across the corporate fleet (macOS, Windows, Linux): OS and application patch posture, first-party and third-party software, and drift from approved baselines.
• Cover software outside our managed and approved catalogs: unmanaged apps and SaaS, package-level software on endpoints (npm, PyPI, Homebrew), and browser and IDE extensions. Identify it, assess it, and drive it to remediation or removal.
• Build the engineering that makes it work: asset inventory, scanner orchestration, deduplication, and prioritization built on reachability and real-world exploitation rather than raw CVSS.
• Engineer remediation into the workflows teams already use, so findings land as owned tickets, fixes ride existing pipelines, and closure verifies automatically.
• Remediate alongside the teams that own the systems: write the patch PR, harden the base image, fix the IaC module, and ship the config change rather than just requesting it.
• Extend the program past where enterprise playbooks run out: BMC and device firmware, GPU drivers, host images at fleet scale, and the long tail of data center equipment.
• Run intake for pen test findings and external reports, and report exposure honestly: what's reachable, what's exploited in the wild, what's accepted and by whom.

Skills

Vulnerability management

Automation (Python)

Security tooling

Asset inventory

Prioritization

Tools

Scanners

Asset systems

Ticketing systems

KEV/EPSS knowledge

Job description

Fluidstack in New York is seeking a security-focused engineer to own exposure and vulnerability management across our AI compute estate, including cloud, on-prem, and end-user endpoints. You will build automation, integrate scanners and ticketing, and drive remediation with cross-functional teams.

This role shapes a scalable, civilization-scale security program. You will work to close gaps rapidly, prioritizing risk with KEV/EPSS insights, and contribute to a culture of proactive defense in a