Cybersecurity Engineer - Vulnerability Management
Jane Street2 months ago
Responsibilities
- Support and improve the vulnerability management lifecycle from discovery and validation through triage, assignment, remediation tracking, and verification.
- Review findings from automated scanners, threat intelligence, and security advisories, prioritizing them based on exploitability and exposure.
- Validate and deduplicate findings, confirm affected products or components, and route remediation work to responsible teams.
- Measure scanning coverage and data quality, including stale scans and authentication failures.
- Drive automation across vulnerability management tools and processes.
- Expand scanning coverage across asset classes and evaluate or migrate scanning platforms as needed.
- Integrate software inventory and SBOM data to identify vulnerable component usage across software.
- Build dashboards and metrics for coverage, SLAs, and remediation progress.
Requirements
- Hands-on vulnerability management experience in a substantial environment.
- Experience with an automated scanning platform such as Rapid7, Tenable, or Qualys.
- Ability to automate processes, maintain code and configurations in version control, and work comfortably under code review.
- Comfort working with data, querying and shaping it, and building and debugging data pipelines and integrations.
- Understanding of how scanning, asset inventory, and remediation tracking fit together.
- Ability to reason about exploitability, exposure, threat modeling, and risk-based prioritization.
- Awareness of cybersecurity developments and strong personal cybersecurity hygiene.
- Clear written and verbal communication across audiences, with a collaborative attitude.
About Jane Street
Jane Street is a global quantitative trading firm and liquidity provider that builds in-house software and research platforms to trade across asset classes. It makes markets and executes proprietary strategies on exchanges and electronic venues, serving institutional markets rather than individual investors. Founded in 2000 and headquartered in New York, it is privately held with offices in London, Hong Kong, Singapore, and Amsterdam.