Vulnerability Management & Remediation Engineer

Workstreet

United States

On-site

USD 90,000 - 130,000

Full time

4 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

Workstreet is seeking a consultative and hands-on Vulnerability Management Engineer to join our Delivery team. You’ll be the primary security advisor for a portfolio of fast-growth startups, helping them identify, prioritize, and fix risks, including direct patch deployment into AWS, Azure, and GCP.

You will combine scanning infrastructure management with high-touch client advisory, surface critical vulnerabilities using CVSS/EPSS, and work with client IT and DevOps teams to remediate findings

Qualifications

Hands-on experience triaging and remediating web vulnerabilities.
Familiarity with Dependabot and software composition analysis.
Ability to prioritize based on CVSS/EPSS and business impact.
Experience deploying patches in cloud environments (AWS/Azure/GCP).

Responsibilities

Triages and prioritizes code vulnerabilities across client repositories.
Owns remediation pull requests and coordinates fixes with engineers.
Configures scanning coverage across GitHub orgs and CI/CD tooling.
Remediates pipeline, container, and infrastructure findings in code.
Manages exceptions and audit evidence for security controls.
Acts as primary security advisor for a portfolio of startups.

Skills

Hands-on vulnerability remediation

GitHub Dependabot / SCA tools

Risk prioritization (CVSS/EPSS)

Cloud patching (AWS/Azure/GCP)

Client advisory / consulting

Tools

Tenable

Vanta

GitHub Advanced Security

SCA/SAST tools

Job description

You will combine scanning infrastructure management with high-touch client advisory, surface critical vulnerabilities using CVSS/EPSS, and work with client IT and DevOps teams to remediate findings

Get your free, confidential resume review.

or drag and drop your file here.