GrepJob
SoFi

Staff Vulnerability Management Engineer

SoFi
Apply
about 4 hours ago
Seattle, WA, USA or San Francisco, CA, USAStaff+
H1B Sponsor

Responsibilities

  • Lead high-complexity vulnerability management initiatives and make architecture decisions.
  • Design and build scalable triage and prioritization automation.
  • Develop risk-based prioritization models for vulnerabilities.
  • Engineer and improve vulnerability workflows across various security domains.
  • Own software supply chain capabilities and integrate security tools into CI/CD.
  • Act as a senior technical responder for critical vulnerabilities and incidents.
  • Partner with development teams to define practical remediation paths.
  • Define technical standards for vulnerability severity and remediation service levels.
  • Produce actionable metrics and dashboards for technical and executive audiences.
  • Lead root-cause analysis for high-impact vulnerability incidents.
  • Evaluate and apply AI/ML techniques to security triage.
  • Build AI-assisted remediation workflows in collaboration with engineering teams.
  • Communicate complex security tradeoffs to various stakeholders.

Requirements

  • Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or related field.
  • Deep expertise in vulnerability management and security engineering.
  • Strong programming skills in Python, Go, Java, or similar languages.
  • Knowledge of vulnerability management methods and standards.
  • Hands-on experience with modern vulnerability and application security tools.
  • Experience designing end-to-end workflows integrating various systems.
  • Working knowledge of cloud-native environments and software supply chains.
  • Ability to lead cross-functional technical initiatives and influence without authority.
  • Experience mentoring engineers and improving engineering quality.
  • Strong written and verbal communication skills.