Senior Vulnerability Risk & Remediation Engineer

United States Digital Space LLC; Seattle, San Francisco (WA, CA); On-site; USD 110,000 - 150,000; Full time

Job summary

United States Digital Space LLC is seeking a Senior Vulnerability Management Engineer in Seattle. You will identify and remediate vulnerabilities across apps, infra, containers, and third‑party dependencies, owning tooling and dashboards.

You’ll work with engineering teams to prioritize issues by exploitability and business impact, using AI-assisted development tools while ensuring security compliance.

Qualifications

• Bachelor's degree or equivalent practical experience in computer science/cybersecurity.
• 4+ years of experience in information security, vulnerability management, or related field.
• Strong understanding of CVE, CVSS, CWE, CISA KEV, EPSS, OWASP and risk-based prioritization.
• Experience with vulnerability-management platforms (e.g., Qualys) and SAST/DAST/SCA tools.
• Experience with containers, Kubernetes, Helm, CI/CD, logging, monitoring, and secret management.

Responsibilities

• Perform vulnerability assessments across applications, OS, containers, and third‑party dependencies.
• Investigate vulnerable dependencies and identify direct vs transitive origins.
• Recommend safe upgrades, configuration changes, patches, or compensating controls.
• Own, maintain, and enhance internal vulnerability-management tools and dashboards.
• Lead remediation initiatives and provide guidance to engineers and security teams.

Skills

Vulnerability management

Kubernetes

Python/Java/Go/Bash

CI/CD pipelines

Cloud security

Education

Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or equivalent

Tools

Qualys

SAST/DAST/SCA tools

Docker

Kubernetes

Job description

United States Digital Space LLC is seeking a Senior Vulnerability Management Engineer in Seattle. You will identify and remediate vulnerabilities across apps, infra, containers, and third‑party dependencies, owning tooling and dashboards.

You’ll work with engineering teams to prioritize issues by exploitability and business impact, using AI-assisted development tools while ensuring security compliance.