Base Salary
$225k - $300k/yr
Responsibilities
- Monitor and triage findings from Wiz, Tenable, GHAS, and other scanners, routing issues to the correct owners with context and priority.
- Manage the centralized vulnerability management platform, including normalization, deduplication, ownership mapping, and data quality.
- Maintain risk scoring and SLA models while tracking overdue findings, backlog trends, high-risk assets, and team performance.
- Partner with code, cloud, endpoint, and engineering teams to clarify findings, prioritize remediation, and get fixes shipped.
- Participate in triage and review sessions and validate that high-risk issues are closed in source tools and Jira.
- Improve vulnerability management processes through connector enhancements, scorecards, runbooks, how-to guides, and automation.
Requirements
- At least 6 years of experience in security engineering or product security, ideally in a cloud-first or SaaS environment.
- Hands-on experience with at least one modern vulnerability or exposure management platform such as Wiz, Tenable, Rapid7, or GHAS.
- Understanding of end-to-end vulnerability management workflows, including scanning, triage, risk scoring, ticketing, validation, and reporting.
- Working knowledge of modern cloud and infrastructure patterns, with AWS preferred, including services, hosts, containers, repositories, teams, and products.
- Strong written and verbal communication skills for explaining vulnerabilities, risk tradeoffs, and SLAs to technical and non-technical stakeholders.
- Experience supporting regulated environments such as FedRAMP, PCI, or SOC 2 and preparing vulnerability-related audit evidence.
Benefits
- Comprehensive healthcare plans
- Family-building benefits, including fertility and adoption/surrogacy support
- Flexible time off
- Annual wellness stipend
- Free One Medical memberships for employees and dependents
- CLEAR Plus membership
- 401(k) retirement plan with employer match
- Catered lunches and stocked kitchens
- Learning and development stipends and reimbursement programs
- Onsite role
About CLEAR
CLEAR is the security identity company making experiences safer and easier—physically and digitally. With over 41 million Members and a growing network of partners across the world, CLEAR’s identity platform is transforming the way people live, work, and travel. Whether you are in the airport, at the stadium, or on your phone, CLEAR connects you to the things that make you, you. CLEAR+ helps you speed through airport security, while CLEAR1 is our enterprise product that powers trusted identity solutions for businesses across healthcare, travel, and financial services. Headquartered in New York City with offices in Austin, TX and Washington D.C., CLEAR’s mission is to strengthen security and create frictionless experiences.