Vulnerability Management Engineer (Fully Remote)

Backblaze; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Backblaze is seeking a security professional to own vulnerability and exposure management across our infrastructure and cloud services. You will combine threat intelligence, asset data, and AI-assisted analysis to prioritize real-world risk and guide remediation efforts.

This role emphasizes automating ingestion, analysis, remediation tracking, and verification to maintain strong security posture. You will work across on-premises and cloud environments, collaborating with engineering and

Qualifications

• Experience with enterprise vulnerability or exposure management programs.
• Strong understanding of infrastructure, applications, cloud, containers, networking, and software dependencies.
• Familiarity with OWASP Top 10, MITRE ATT&CK, MITRE D3FEND, and STRIDE.

Responsibilities

• Correlate vulnerability, asset, and configuration intelligence to determine exploitability and reachability.
• Incorporate exploit prediction, known exploitation, and environmental context into prioritization.
• Automate ingestion, analysis, remediation tracking, mitigation, and verification.

Skills

Vulnerability management

Threat analysis

Cloud infrastructure

Container security

Networking concepts

Software dependencies

OWASP Top 10

MITRE ATT&CK

MITRE D3FEND

STRIDE

Job description

• Backblaze is a leading specialized storage cloud and a pioneer in the open cloud movement.
• We went public in 2021 and now serve over 500,000 customers across 175+ countries.

About the Role:

• You will own vulnerability and exposure management across our infrastructure, applications, and cloud services.
• You will combine threat intelligence, asset data, and AI-assisted analysis to prioritize real-world risk.

Key Responsibilities:

• Correlate vulnerability, asset, and configuration intelligence to determine exploitability and reachability.
• Incorporate exploit prediction, known exploitation, and environmental context into prioritization.
• Automate ingestion, analysis, remediation tracking, mitigation, and verification.

Qualifications:

• Experience with enterprise vulnerability or exposure management programs.
• Strong understanding of infrastructure, applications, cloud, containers, networking, and software dependencies.
• Familiarity with OWASP Top 10, MITRE ATT&CK, MITRE D3FEND, and STRIDE.

Backblaze is the object storage leader in the open cloud movement, providing purpose-built cloud storage to help customers break free from legacy solutions. Founded in 2007, the company went public in 2021, generates over $136M ARR, manages over three billion gigabytes for 500K+ customers, and fosters a culture of diversity, equity, and inclusion.