Senior Staff Engineer, AI-Driven Vulnerability Mgmt

Zocdoc

New York (NY)

On-site

USD 200,000 - 290,000

Full time

14 days+

Application generator

A complete application in a minute — tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Flexible work environment

Unlimited vacation

Health benefits

401(k) match

Wellness programs

Job summary

Zocdoc is seeking a Senior Staff Engineer focused on Vulnerability Management to lead an AI-driven platform across cloud, containers, and application environments. You will shape the technical roadmap and drive automated remediation in coordination with Software Engineering and DevOps.

The role emphasizes offensive security exercises, cloud security expertise, and advanced automation using Python/Go/Rust, with strong emphasis on AI/LLM integration to accelerate prioritization and patching

Qualifications

At least 8 years in security engineering or software development focused on infrastructure and container security.
Proven automation scripting experience for security tooling at scale.
Hands-on with offensive security exercises (red/purple teaming) or pentesting.
Deep cloud security for AWS/GCP/Azure and container ecosystems (Docker/Kubernetes).
Proficient in Python/Go/Rust for automation and patching workflows.
Familiar with CVSS/EPSS, OWASP Top 10, and integrating scanners into CI/CD with AI/LLMs.

Responsibilities

Own the roadmap for an AI-driven vulnerability scanning platform across cloud infra, containers, and apps.
Build models to correlate findings from SAST/DAST/SCA and cloud posture tooling.
Create AI-assisted triage workflows to reduce false positives and route issues.
Lead red-team and purple-team exercises to validate exploitable paths.
Collaborate with Software Eng and DevOps to automate remediation pipelines.
Integrate security guardrails into CI/CD and provide telemetry for risk visibility.
Leverage GenAI tools to analyze findings and accelerate remediation workflows.