3 months ago
Base Salary
$225k - $300k/yr
Responsibilities
- Monitor and triage findings from Wiz, Tenable, GHAS, and other scanners, routing issues to the correct owners with context and priority.
- Manage the centralized vulnerability management platform, including normalization, deduplication, ownership mapping, and data quality.
- Maintain risk scoring and SLA models while tracking overdue findings, backlog trends, high-risk assets, and team performance.
- Partner with code, cloud, endpoint, and engineering teams to clarify findings, prioritize remediation, and get fixes shipped.
- Participate in triage and review sessions and validate that high-risk issues are closed in source tools and Jira.
- Improve vulnerability management processes through connector enhancements, scorecards, runbooks, how-to guides, and automation.
Requirements
- At least 6 years of experience in security engineering or product security, ideally in a cloud-first or SaaS environment.
- Hands-on experience with at least one modern vulnerability or exposure management platform such as Wiz, Tenable, Rapid7, or GHAS.
- Understanding of end-to-end vulnerability management workflows, including scanning, triage, risk scoring, ticketing, validation, and reporting.
- Working knowledge of modern cloud and infrastructure patterns, with AWS preferred, including services, hosts, containers, repositories, teams, and products.
- Strong written and verbal communication skills for explaining vulnerabilities, risk tradeoffs, and SLAs to technical and non-technical stakeholders.
- Experience supporting regulated environments such as FedRAMP, PCI, or SOC 2 and preparing vulnerability-related audit evidence.
Benefits
- Comprehensive healthcare plans
- Family-building benefits, including fertility and adoption/surrogacy support
- Flexible time off
- Annual wellness stipend
- Free One Medical memberships for employees and dependents
- CLEAR Plus membership
- 401(k) retirement plan with employer match
- Catered lunches and stocked kitchens
- Learning and development stipends and reimbursement programs
- Onsite role
About CLEAR
CLEAR builds a biometric identity platform used to verify people quickly at airports, stadiums, and online. It sells CLEAR Plus consumer subscriptions for expedited airport security and provides enterprise identity, age verification, and digital ID services to partners in travel, healthcare, and financial services. Founded in 2010 and headquartered in New York, the company is publicly traded on the NYSE under the ticker YOU.