Staff Vulnerability Management Engineer

Job highlights

• You love what you do and you do it with purpose . What We re Looking for (Minimum Qualifications) . 7+ years of experience with at least 5 years focused on hands-on vulnerability management and platform operation for network,web,and endpoint detection . Proficiency with vulnerability scanners including Tenable,Qualys,Wiz,Crowdstrike,Burp Suite,and OWASP ZAP . .

We are looking for a Staff Vulnerability Management Engineer to join our Product Security team in a hybrid capacity, based out of our Bangalore office three days a week. In this role, you will report to the Senior Manager, Information Security Engineering. You will bring your vision and passion to a team of cloud architects and security experts who have built the world s largest cloud security platform from the ground up. You will play a critical role in enhancing our services and enabling organizations worldwide to harness speed and agility through a secure, cloud-first strategy.

What you ll do (Role Expectations)

• Lead the Vulnerability Management team in conducting regular vulnerability assessments and scans using industry-leading tools
• Analyze and interpret scan results to identify vulnerabilities and assess their risk while providing detailed remediation guidance
• Collaborate with IT, DevOps, and development teams to remediate identified vulnerabilities and ensure secure deployment practices
• Develop and maintain automated processes for vulnerability scanning, reporting, and remediation tracking

Who You Are (Success Profile)

• You thrive in ambiguity. Youre comfortable building the path as you walk it. You thrive in a dynamic environment, seeing ambiguity not as a hindrance, but as the raw material to build something meaningful
• You act like an owner. Your passion for the mission fuels your bias for action. You operate with integrity because you genuinely care about the outcome. True ownership involves leveraging dynamic range: the ability to navigate seamlessly between high-level strategy and hands-on execution
• You are a problem-solver. You love running towards the challenges because you are laser-focused on finding the solution, knowing that solving the hard problems delivers the biggest impact
• You are a high-trust collaborator. You are ambitious for the team, not just yourself. You embrace our challenge culture by giving and receiving ongoing feedback knowing that candor delivered with clarity and respect is the truest form of teamwork and the fastest way to earn trust
• You are a learner. You have a true growth mindset and are obsessed with your own development, actively seeking feedback to become a better partner and a stronger teammate. You love what you do and you do it with purpose

What We re Looking for (Minimum Qualifications)

• 7+ years of experience with at least 5 years focused on hands-on vulnerability management and platform operation for network, web, and endpoint detection
• Proficiency with vulnerability scanners including Tenable, Qualys, Wiz, Crowdstrike, Burp Suite, and OWASP ZAP
• Deep understanding of security principles, attack vectors, and monitoring to ensure timely and effective risk management
• Proven experience working effectively with geographically distributed teams

What Will Make You Stand Out (Preferred Qualifications)

• Proficiency in scripting and automation using Python or PowerShell, along with experience in automation tools like Tines and ticketing systems such as Avalor UVM or Nucleus
• Familiarity with CI/CD systems and DevSecOps practices within a fast-paced environment
• Expertise in securing cloud environments across AWS, Azure, and Google Cloud using cloud-native security methodologies