1 day ago
Base Salary
$134k - $181k/yr
Responsibilities
- Design and deploy multi-agent systems that manage exposures from discovery through verified closure, including patch or IaC generation, approval gates, audit trails, and rollback.
- Build risk-based exposure prioritization using reachability, attack paths, business criticality, exploit intelligence, CVSS, EPSS, and CISA KEV.
- Automate verification to distinguish theoretical vulnerabilities from actively exploitable conditions.
- Drive the Continuous Threat Exposure Management strategy across products, platforms, cloud and on-premise infrastructure, and corporate applications.
- Assess and improve the exposure and vulnerability management program in support of a zero-trust security approach.
- Architect cloud-native discovery, asset inventory, and remediation workflows integrated with ticketing, CI/CD, and configuration management.
- Partner with Engineering and IT to embed secure-by-default practices and risk-aligned remediation timelines.
- Define KPIs, KCIs, and KRIs for remediation performance, exploitable exposure backlog, and critical-asset coverage.
- Support regulatory compliance by designing exposure and vulnerability controls aligned with standards such as SOC2.
Requirements
- Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
- 7+ years of experience in vulnerability management, exposure management, or related information security domains, including leading large-scale programs from strategy through execution in cloud-first and hybrid environments.
- Deep security knowledge and experience turning vulnerability data into prioritized, owned, and verified remediation.
- Hands-on experience building or deploying AI/LLM-based agents or multi-agent systems for security or engineering workflows, including orchestration, tool use, and evaluation.
- Knowledge of approval workflows, audit logging, rollback controls, and risks associated with agent-driven changes.
- Proficiency in one or more programming languages such as Python, Go, or Java, plus strong scripting skills.
- Expertise with vulnerability and exposure management platforms such as Tenable, Qualys, or Rapid7, and with CTEM, attack surface management, and attack-path analysis tooling.
- Experience with AWS, Azure, or GCP; container and Kubernetes security; and Terraform or CloudFormation for automated remediation.
- Experience with CI/CD pipelines, SCA/SAST tooling, software supply chain security, SBOMs, and dependency mapping.
- Knowledge of UNIX/Linux, macOS, Windows, networking, and database management systems.
- Experience with risk management and compliance requirements such as SOC2 or GxP.
- CISSP, OSCP, or GWAPT certification is highly desirable.
Benefits
- Remote position based in the United States with regular on-site visits for routine work and departmental events.
- Estimated annual base salary range of $134,200–$180,600, plus eligibility for annual bonus, equity compensation, and comprehensive benefits.
- Equal opportunity employer with accommodations available during the selection process.
Tech Stack
Categories
About Recursion
Recursion is a clinical-stage biotechnology company that uses an AI-driven discovery platform (Recursion OS) combining high-throughput biology, chemistry, and computation to discover and develop new medicines. It advances an internal pipeline and forms discovery and development partnerships with biopharma across oncology, immunology and inflammation, and rare diseases. Founded in 2013 and headquartered in Salt Lake City, it is a public company listed on NASDAQ (RXRX).