Vulnerability & Exposure Management Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Vulnerability & Exposure Management Engineer based in United States.

This role offers the opportunity to help shape and scale a modern vulnerability and exposure management program within a mission-driven technology environment. You will focus on transforming vulnerability data into actionable security insights that reduce real-world risk across application, cloud, and infrastructure ecosystems. The position combines hands-on engineering, automation, and security strategy to improve how teams identify, prioritize, and remediate vulnerabilities. You will collaborate closely with engineering, product, and security teams to embed security practices into everyday development workflows. This is an impactful role for a technically curious security professional who enjoys building scalable solutions rather than managing processes alone. You will contribute to strengthening data security practices in a highly regulated industry while working with innovative security technologies. The ideal candidate thrives in a fast-paced environment where ownership, technical depth, and continuous improvement are highly valued.

Accountabilities:: The Vulnerability & Exposure Management Engineer will design, implement, and improve security capabilities that help teams identify and reduce exposure risks. This role requires strong technical execution, automation skills, and the ability to translate security findings into practical engineering actions.

Build and operate vulnerability and exposure management solutions focused on identifying and reducing exploitable risks across applications, cloud environments, and infrastructure.

Develop automation, workflows, and integrations that collect, normalize, prioritize, and operationalize vulnerability data from multiple security sources.

Create engineer-facing dashboards and tools that improve visibility into security risks and enable faster remediation.

Partner with engineering and product teams to evaluate vulnerabilities, explain exploitability and business impact, and recommend effective mitigation strategies.

Integrate vulnerability insights into engineering workflows, including CI/CD pipelines, pull requests, and development backlogs.

Validate remediation activities and ensure security improvements meaningfully reduce organizational exposure.

Translate security and compliance requirements into scalable technical solutions supporting regulatory assessments.

Support security audits and compliance initiatives by providing technical evidence and validating remediation outcomes.

Improve vulnerability management processes, tooling, and automation to increase efficiency and effectiveness.

Contribute technical expertise to security projects involving cloud security, application security, and security data platforms.

Requirements:

The ideal candidate combines strong vulnerability management expertise with engineering skills, automation capabilities, and the ability to collaborate effectively across technical teams.

Proven experience in vulnerability management, application security, or related cybersecurity disciplines, with hands-on experience assessing and prioritizing security findings.

Strong programming or scripting experience using languages such as Python or Go to automate security workflows and improve operational efficiency.

Experience working with application security, cloud security, and container security across AWS and/or Azure environments.

Solid understanding of security frameworks and controls such as NIST, CIS, and FedRAMP, with the ability to apply them in practical engineering contexts.

Ability to assess vulnerabilities beyond severity scores by evaluating exploitability, exposure, and potential business impact.

Experience collaborating with engineering teams to support remediation efforts and improve security adoption.

Familiarity with commercial security tools, including SAST, SCA, cloud security platforms, and the ability to critically interpret their findings.

Strong communication skills with the ability to explain technical risks and recommendations to both technical and non-technical audiences.

Experience working in fast-moving environments where priorities evolve and independent execution is essential.

Experience building security automation, data pipelines, or custom tooling to improve vulnerability visibility and prioritization is preferred.

Exposure to regulated industries, healthcare security requirements, or compliance-driven environments is a plus.

Familiarity with CI/CD security integrations, cloud security platforms, security data tools, and AI-assisted development tools is advantageous.

Benefits:

Competitive total cash compensation range of $152,000 – $185,000 USD , depending on experience, skills, responsibilities, and role level.

Opportunity to work on impactful cybersecurity initiatives supporting secure and reliable healthcare data systems.

Collaborative, high-performance environment focused on innovation, ownership, and continuous improvement.

Comprehensive rewards strategy designed to recognize contributions in a high-growth technology organization.

Inclusive workplace culture committed to diversity, belonging, and equal opportunity.

Support for professional growth through exposure to modern security technologies and complex technical challenges.

Remote work flexibility with opportunities to collaborate across distributed teams.

Health and wellness support, including benefits designed to support employees and their families.

Additional employee programs and resources aligned with long-term career development.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether?    Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.     #LI-CL1