Vulnerability & Exposure Security Engineer

Datavant2; United States; On-site; USD 152,000 - 185,000; Full time

Job summary

Datavant is seeking a security engineer to build and operate a vulnerability and exposure management program focused on automation and practical risk reduction across applications, cloud, and infrastructure.

You will design, implement, and optimize workflows, dashboards, and integrations to turn vulnerability data into actionable signals, working with product and engineering teams to validate findings and drive remediation.

Qualifications

• Solid technical experience in vulnerability management and application security.
• Ability to build or automate technical workflows using scripting or programming languages (Python or Go).
• Experience with application, cloud, or container security in AWS and/or Azure.
• Knowledge of security controls and compliance frameworks (e.g., NIST, CIS, FedRAMP).
• Ability to explain exploitability, exposure, and impact beyond severity scores.

Responsibilities

• Design, implement, and operate vulnerability and exposure management capabilities to reduce real exploit risk.
• Build and enhance automation and workflows to ingest, normalize, and prioritize signals from multiple sources.
• Develop dashboards and integrations to help teams act on vulnerability risk.
• Collaborate with product and engineering to assess findings and support remediation.
• Embed vulnerability signals into CI/CD, PRs, and backlogs to improve visibility and adoption.
• Validate remediation efforts to ensure exposure is reduced.

Skills

Vuln management

App security

Python/Go scripting

AWS/Azure security

CI/CD integration

Security tooling

Tools

SAST

SCA

Cloud security platforms

Job description

Datavant is seeking a security engineer to build and operate a vulnerability and exposure management program focused on automation and practical risk reduction across applications, cloud, and infrastructure.

You will design, implement, and optimize workflows, dashboards, and integrations to turn vulnerability data into actionable signals, working with product and engineering teams to validate findings and drive remediation.