Cybersecurity Engineer - Vulnerability Management
Jane Street14 days ago
Responsibilities
- Support and improve the vulnerability management lifecycle from discovery and validation through triage, assignment, remediation tracking, and verification.
- Review findings from automated scanners, threat intelligence, and security advisories, prioritizing them based on exploitability and exposure.
- Validate and deduplicate findings, confirm affected products or components, and route remediation work to responsible teams.
- Measure scanning coverage and data quality, including stale scans and authentication failures.
- Drive automation across vulnerability management tools and processes.
- Expand scanning coverage across asset classes and evaluate or migrate scanning platforms as needed.
- Integrate software inventory and SBOM data to identify vulnerable component usage across software.
- Build dashboards and metrics for coverage, SLAs, and remediation progress.
Requirements
- Hands-on vulnerability management experience in a substantial environment.
- Experience with an automated scanning platform such as Rapid7, Tenable, or Qualys.
- Ability to automate processes, maintain code and configurations in version control, and work comfortably under code review.
- Comfort working with data, querying and shaping it, and building and debugging data pipelines and integrations.
- Understanding of how scanning, asset inventory, and remediation tracking fit together.
- Ability to reason about exploitability, exposure, threat modeling, and risk-based prioritization.
- Awareness of cybersecurity developments and strong personal cybersecurity hygiene.
- Clear written and verbal communication across audiences, with a collaborative attitude.
About Jane Street
Jane Street is a quantitative trading firm with offices in New York, London, Hong Kong, Singapore, and Amsterdam. We are always recruiting top candidates and we invest heavily in teaching and training. The environment at Jane Street is open, informal, intellectual, and fun. People grow into long careers here because there are always new and interesting problems to solve, systems to build, and theories to test. More than twenty years after our founding, it still feels like we’re just getting started. Jane Street does not offer any services to individual investors: https://www.janestreet.com/fraud-and-impersonation-warnings/