Senior Vulnerability Risk & Remediation Engineer

Sofi; Seattle, San Francisco (WA, CA); Sur place; USD 110 000 - 150 000; Plein temps

Résumé du poste

United States Digital Space LLC is seeking a Senior Vulnerability Management Engineer in Seattle. You will identify and remediate vulnerabilities across apps, infra, containers, and third‑party dependencies, owning tooling and dashboards.

You’ll work with engineering teams to prioritize issues by exploitability and business impact, using AI-assisted development tools while ensuring security compliance.

Qualifications

• Bachelor's degree or equivalent practical experience in computer science/cybersecurity.
• 4+ years of experience in information security, vulnerability management, or related field.
• Strong understanding of CVE, CVSS, CWE, CISA KEV, EPSS, OWASP and risk-based prioritization.
• Experience with vulnerability-management platforms (e.g., Qualys) and SAST/DAST/SCA tools.
• Experience with containers, Kubernetes, Helm, CI/CD, logging, monitoring, and secret management.

Responsabilités

• Perform vulnerability assessments across applications, OS, containers, and third‑party dependencies.
• Investigate vulnerable dependencies and identify direct vs transitive origins.
• Recommend safe upgrades, configuration changes, patches, or compensating controls.
• Own, maintain, and enhance internal vulnerability-management tools and dashboards.
• Lead remediation initiatives and provide guidance to engineers and security teams.

Connaissances

Vulnerability management

Kubernetes

Python/Java/Go/Bash

CI/CD pipelines

Cloud security

Formation

Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or equivalent

Outils

Qualys

SAST/DAST/SCA tools

Docker

Kubernetes

Description du poste

United States Digital Space LLC is seeking a Senior Vulnerability Management Engineer in Seattle. You will identify and remediate vulnerabilities across apps, infra, containers, and third‑party dependencies, owning tooling and dashboards.

You’ll work with engineering teams to prioritize issues by exploitability and business impact, using AI-assisted development tools while ensuring security compliance.