Security Engineer, Exposure and Vulnerability Management
Fluidstack5 hours ago
Base Salary
$224k - $275k/yr
Responsibilities
- Own exposure and vulnerability management across the external attack surface, cloud, Kubernetes, corporate endpoints, network infrastructure, bare metal, firmware, GPU drivers, host images, and data center equipment.
- Extend vulnerability coverage across macOS, Windows, and Linux endpoints, including operating system and application patch posture, unmanaged software, SaaS, packages, browser extensions, and IDE extensions.
- Build production engineering for asset inventory, scanner orchestration, finding deduplication, prioritization, remediation workflows, and automated closure verification.
- Prioritize vulnerabilities using reachability, real-world exploitation, KEV, EPSS, and professional judgment rather than raw CVSS alone.
- Remediate vulnerabilities directly by writing patch pull requests, hardening base images, fixing infrastructure-as-code modules, and shipping configuration changes.
- Drive remediation across teams that do not report directly to the role and maintain credible remediation service-level agreements.
- Run intake for penetration-testing findings and external reports and provide accurate exposure reporting.
Requirements
- Experience building vulnerability management as an engineering program using pipelines, automation, and integrations rather than spreadsheet triage.
- Production-quality automation experience with Python or a similar language, including integrating scanners, asset systems, and ticketing systems.
- Experience prioritizing vulnerabilities using KEV, EPSS, reachability, and real-world exploitation context.
- Hands-on experience fixing vulnerabilities in codebases or infrastructure and delivering high-quality pull requests.
- Experience driving remediation at scale across teams without direct reporting authority.
- Ability to assess less commonly covered technologies such as firmware, GPU stacks, or data center equipment.
- Experience covering corporate endpoints and third-party software, including unmanaged applications, packages, browser extensions, and IDE extensions.
- Preferred experience with external attack surface management platforms, firmware or BMC security, CSPM/KSPM tooling, exploit development or reachability validation, endpoint management and patching tools, software inventory, and extension or supply-chain risk.
Benefits
- Fluidstack states its commitment to pay equity and transparency.
- Fluidstack is an Equal Employment Opportunity Employer.
Tech Stack
Categories
About Fluidstack
Fluidstack provides on-demand GPU cloud infrastructure for AI training and inference, offering dedicated clusters of NVIDIA H200 and GB200 systems. The company sells compute capacity and managed clusters to AI labs, enterprises, and public-sector teams that need high-throughput workloads. Founded in 2017 and headquartered in New York, it is privately held.