Senior Vulnerability Management Engineer - Remote UK Hours

IRIS; United States; Remote; USD 120.000 - 190.000; Vollzeit

Benefits dieser Stelle

Drop transport for women colleagues

Zusammenfassung

IRIS Software Group is seeking a Senior Information Security Engineer - Vulnerability Management to own the end-to-end lifecycle from identification to remediation across products and platforms. You will triage findings from SAST, DAST, SCA and secrets scans, and collaborate with Engineering and Product teams to drive timely remediation.

You will also help integrate security tooling into CI/CD pipelines, develop risk-based prioritisation, and strengthen cloud security across AWS/Azure while

Qualifikationen

• Experience with application security, vulnerability management, and security tooling.
• Ability to assess risk beyond scanner output and context.
• Cloud security across AWS and/or Azure with secure configurations.

Aufgaben

• Own the end-to-end vulnerability management lifecycle across our products and supporting technology, from identification and validation through prioritisation, remediation tracking, risk acceptance and reporting.
• Triage and validate findings from SAST, DAST, SCA, secrets scanning, penetration testing and web application scanning.
• Work closely with Engineering and Product teams to drive remediation of vulnerabilities and align on remediation timelines.
• Partner with teams integrating security tooling into CI/CD pipelines to improve coverage and effectiveness.
• Develop risk-based vulnerability prioritisation considering exploitability, asset exposure and business criticality.
• Identify recurring vulnerability patterns and root causes to reduce systemic weaknesses.
• Continuously improve vulnerability management processes, dashboards and workflows for scalability.
• Support security review of software supply chain risks including dependency management and secure build practices.
• Review findings from cloud security and CSPM platforms to prioritise and remediate cloud vulnerabilities.
• Research emerging cloud threats and mitigations and implement appropriate controls.

Kenntnisse

Application security

Vulnerability management

Software engineering

CI/CD security

SAST

DAST

SCA

Secrets scanning

Cloud security

AWS/Azure

Tools

SAST

DAST

SCA

Secrets scanning

CI/CD pipelines

Jobbeschreibung

IRIS Software Group is seeking a Senior Information Security Engineer - Vulnerability Management to own the end-to-end lifecycle from identification to remediation across products and platforms. You will triage findings from SAST, DAST, SCA and secrets scans, and collaborate with Engineering and Product teams to drive timely remediation.

You will also help integrate security tooling into CI/CD pipelines, develop risk-based prioritisation, and strengthen cloud security across AWS/Azure while