Senior Software Engineer, Vulnerability Management

Job description

**This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Senior Software Engineer, Vulnerability Management based in the United States.** Join a remote-first engineering environment focused on strengthening software security at scale and protecting the infrastructure that developers rely on every day. As a Senior Software Engineer specializing in Vulnerability Management, you will design, build, and maintain distributed systems that identify security vulnerabilities across cloud infrastructure, container images, hosts, and code. You will help ensure that security findings reach the appropriate engineering teams and are remediated according to risk priorities, service-level agreements, and compliance requirements. You will also develop software supply chain security controls that improve the integrity of packages, builds, and deployment workflows without slowing down development. Working closely with platform engineering, cloud security, compliance, and service owners, you will influence architecture and drive technical excellence across production systems. This opportunity combines complex backend engineering, security innovation, technical leadership, and meaningful contributions to a large-scale developer ecosystem. ### Accountabilities: - Design, develop, test, deploy, and maintain high-quality software solutions that scale across multiple services and distributed systems. - Build and improve vulnerability management platforms that collect security findings from container images, cloud environments, host infrastructure, and code-scanning tools. - Develop systems that accurately assign vulnerabilities to the teams responsible for remediation and track resolution through risk scoring, service-level agreements (SLAs), and documented exceptions. - Design and implement software supply chain security controls, including authenticated package and container proxies that enforce security policies across GitHub Actions, Docker builds, and Dependabot workflows. - Create security solutions that integrate smoothly into existing development processes, enabling engineering teams to adopt stronger controls without unnecessary disruption to productivity. - Develop and maintain production services that meet regulatory and compliance requirements, including FedRAMP, while preserving the stability and compatibility of APIs used by other teams. - Collaborate with service owners, platform engineers, cloud security specialists, compliance teams, and other stakeholders to define requirements and deliver effective technical solutions. - Provide technical leadership through architecture discussions, code reviews, mentoring, knowledge sharing, and collaborative programming sessions. - Take ownership of the reliability, maintainability, performance, and overall quality of the systems developed by the team. - Participate in on-call rotations and first-responder responsibilities to investigate incidents, troubleshoot production issues, and maintain service availability. - Prepare architecture briefs and technical proposals, conduct code experiments, and develop prototypes to evaluate approaches for building systems that operate at exceptional scale. - Develop a deep understanding of the systems you own and consistently deliver secure, maintainable, and well-documented code. - Contribute to continuous improvement by identifying architectural opportunities, strengthening engineering practices, and evolving security capabilities as organizational needs change. ## Requirements: - At least six years of professional experience in software engineering, computer science, or a related technical discipline, with demonstrated experience developing, maintaining, and delivering production software. - Alternatively, candidates may qualify through one of the following pathways: - An associate degree in Computer Science, Electrical Engineering, Electronics Engineering, Mathematics, Physics, Computer Engineering, or a related field, combined with at least five years of relevant software engineering experience. - A bachelor's degree in one of these or a related technical disciplines, combined with at least four years of relevant software engineering experience. - A master's degree in a relevant technical discipline, combined with at least two years of relevant software engineering experience. - A doctorate in a relevant technical discipline, or equivalent practical experience. - Proven programming experience in one or more languages, such as C, C++, C#, Java, JavaScript, Go, Ruby, Rust, or Python. - Strong software engineering fundamentals, including application design, testing, debugging, production maintenance, and the delivery of reliable software systems. - Ability to analyze complex technical challenges, design scalable solutions, and make sound architectural decisions in distributed computing environments. - Strong problem-solving skills, attention to detail, and a commitment to writing secure, maintainable, and high-quality code. - Excellent communication and collaboration skills, with the ability to work effectively across engineering, security, infrastructure, and compliance teams. - A proactive approach to technical ownership, continuous learning, knowledge sharing, and delivering measurable improvements to production systems. Preferred qualifications: - At least two years of experience using general-purpose programming and scripting languages, such as Go, Python, or similar technologies. - At least three years of experience working with cloud environments and/or Cloud Native Computing Foundation (CNCF) concepts. - Familiarity with vulnerability management, software supply chain security, container security, cloud security, or secure software development practices. - Experience building or operating distributed systems and security platforms at scale. - Knowledge of CI/CD workflows, automated security controls, package management, container build processes, and modern DevSecOps practices. - Familiarity with security compliance frameworks and production systems operating under regulatory requirements. - Experience providing technical mentorship, conducting code reviews, and contributing to architectural decisions across engineering teams. ## Benefits: - Annual base salary: $124,000–$329,200 USD, depending on location, experience, knowledge, skills, and qualifications. - Additional compensation: Eligible roles may receive annual bonuses and stock-based rewards based on individual impact and applicable compensation plans. - Remote work: Remote-first working environment, with the flexibility to work remotely within the United States. - Competitive total compensation: Compensation packages designed to reflect role responsibilities, professional experience, and individual contributions. - Learning and development: Opportunities to expand technical expertise, pursue professional growth, and learn from experienced engineering teams. - Career advancement: Opportunities to contribute to complex technical initiatives, influence architecture, and develop leadership capabilities. - Collaborative culture: Work with diverse professionals who value knowledge sharing, innovation, continuous improvement, and collective success. - Inclusive workplace: A culture that welcomes people from different backgrounds and is committed to equal opportunity and accessibility. - Meaningful technical impact: Help strengthen software security and supply chain integrity across large-scale developer infrastructure. - Application timeline: Applications are accepted on an ongoing basis until the position is filled. The role is scheduled to remain open for at least three days.