Threat & Vulnerability Engineer

Responsibilities:

• You will help advance Point72's vulnerability management program across a modern, cloud-enabled technology environment, turning security findings into measurable risk reduction.
• Shape the evolution of Point72's vulnerability management program by improving how teams discover, prioritize, remediate, and measure risks across technology environments.
• Engineer automation that reduces manual vulnerability workflows, accelerates remediation, and improves the quality of security data used by teams and leaders.
• Assess vulnerabilities across cloud, container, server, endpoint, and application environments to identify material risks and drive timely remediation.
• Partner with infrastructure, cloud, development, and security teams to translate findings into clear remediation plans that align with production realities.
• Develop risk-based prioritization methods that account for exploitability, asset criticality, exposure, and business context.
• Improve container and cloud vulnerability coverage by refining scanning processes, integration points, and remediation feedback loops.
• Create dashboards and reports that show vulnerability trends, remediation progress, control gaps, and areas requiring leadership attention.
• Investigate emerging threats and vulnerability disclosures to determine potential exposure and coordinate response actions across affected teams.
• Document standards, processes, and technical guidance that help teams consistently manage vulnerabilities throughout the technology lifecycle.

Requirements:

• Professional experience in information security, with hands-on responsibility for threat and vulnerability management in enterprise technology environments.
• Demonstrated experience maturing a vulnerability management program, including discovery, prioritization, remediation tracking, exception handling, and management reporting.
• Hands-on experience securing cloud-based environments, including vulnerability assessment, misconfiguration analysis, exposure review, and remediation coordination.
• Hands-on experience with container security, including image scanning, runtime risk assessment, and vulnerability remediation in containerized environments.
• Strong automation and scripting skills for integrating security data, improving workflows, and reducing manual operational effort.
• Solid understanding of vulnerability severity, exploitability, asset criticality, attack paths, and risk-based remediation approaches.
• Ability to analyze security findings, validate risk, identify false positives, and communicate practical remediation guidance to technical teams.
• Strong collaboration and ownership skills, with the ability to drive remediation across technology stakeholders in a global environment.
• Excellent written and verbal English communication skills for reporting risk, explaining technical issues, and influencing remediation outcomes.
• Commitment to the highest ethical standards.