Senior Vulnerability Management Engineer
Senior Vulnerability Management Engineer responsible for scanning, triaging, and remediating security vulnerabilities across Celonis' cloud and on-premise infrastructure. Requires 5+ years in vulnerability management and expertise in tools like Qualys, CSPM platforms, and SAST.
About the job
Responsibilities
- Execute comprehensive vulnerability scans across network, cloud, and applications.
- Interpret and triage findings from network scanners, Cloud Security Posture Management (CSPM), Software Composition Analysis (SCA), and Static Application Security Testing (SAST).
- Provide actionable intelligence and prioritization metrics to remediation teams.
- Develop and maintain an asset inventory for dynamic scanning requirements.
- Create executive-level vulnerability metrics and dashboards.
- Participate in Red Team exercises to identify potential vulnerabilities proactively.
Requirements
- Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or related field.
- Minimum of 5 years in a dedicated vulnerability management role.
- Deep understanding of networking protocols and cloud architectures.
- Hands-on experience with premium vulnerability scanning tools such as Qualys, Nessus, or similar.
- Strong proficiency in CSPM tools like Prisma, Dome9, or similar.
- Expertise in interpreting SAST results from tools like Checkmarx or Veracode.
- Excellent scripting skills in Python or Bash for custom vulnerability identification.
Nice-to-Haves
- Certified Information Systems Security Professional (CISSP) or Certified Ethical Hacker (CEH) certification.
Skills
Vulnerability Management, Qualys, Nessus, Cspm, Prisma, Dome9, SAST, Checkmarx, Veracode, Python, Bash, Networking Protocols, Cloud Architectures
Similar jobs
Security Engineering jobs
Idme
McLean, VA
Leads cloud-native security operations, incident response, threat hunting, and forensic investigations while mentoring SOC analysts and improving detection processes. Requires 8+ years in information security, including hands-on cloud incident response and experience with Kubernetes, CI/CD, and advanced security tools.
ConductorOne
San Francisco, CASenior Security Engineer responsible for application, cloud, and platform security, with a focus on automating security workflows, threat modeling, secure development, and remediation. Requires hands-on SaaS security, cloud infrastructure, code review, and agent or automation experience.
Mercor
San Francisco, CA
Leads the company’s security GRC function, owning SOC 2, ISO 27001, enterprise audits, third-party risk, policy governance, and automated evidence workflows. Requires 7+ years of GRC or audit experience, end-to-end SOC 2 and ISO 27001 ownership, and strong security tooling expertise.
Anthropic
San Francisco, CALeads technical SOX controls assurance for financially significant systems, translating audit requirements into engineering acceptance criteria and continuous monitoring. Requires ITGC and SOX 404 expertise, strong engineering fluency, programming ability, and cross-functional collaboration with Finance, Engineering, and auditors.
Discord
United States
Senior platform security engineer responsible for building identity and access management systems, Zero Trust architecture, cloud security baselines, and secure developer platforms. Requires 5+ years operating production systems and strong software development and security experience.