Senior Engineer, Exposure & Vulnerability Management
Recursion Pharmaceuticals · Remote Opportunity - United States
About this role
**Senior Engineer, Exposure & Vulnerability Management** ## The Impact You’ll Make Help shift Recursion from periodic scans to continuous, risk-driven exposure management. You’ll build multi-agent systems that move vulnerabilities from discovery to verified closure—complete with approval gates, audit trails, and rollback. You’ll replace static CVSS scoring with prioritization based on reachability, attack paths, business criticality, and live exploit intelligence, so teams focus on what’s actually exploitable. ## In this role, you will - Design and deploy multi-agent systems to take exposures from discovery to closure (outside-in analysis, inside-out dependency mapping, patch/IaC generation, and validation), with approval gates, audit trails, and rollback. - Build prioritization engines that rank exposures using real-time reachability, attack-path context, business criticality, and live exploit intelligence. - Reduce alert noise with automated verification that distinguishes theoretical flaws from actively exploitable conditions. - Drive Continuous Threat Exposure Management (CTEM), moving to a proactive, around-the-clock security posture across products, platforms, cloud/on-prem infrastructure, and corporate applications. - Assess and revamp the current exposure/vulnerability management program to accelerate business outcomes and support zero-trust. - Architect cloud-native discovery, asset inventory, and remediation workflows; integrate with ticketing, CI/CD, and configuration management to ensure fixes ship without manual hand-offs. - Partner with Engineering and IT to embed secure-by-default practices into building, deploying, and patching—aligning remediation timelines to real risk. - Define KPIs/KCIs/KRIs (e.g., mean time to remediate, exploitable-exposure backlog, coverage of critical assets) to guide continuous improvement. - Support regulatory compliance (e.g., SOC 2) by designing exposure and vulnerability controls that meet required standards. ## The Experience You’ll Need - Bachelor’s or Master’s in CS, Information Security, or related field (or equivalent practical experience). - 7+ years in vulnerability/exposure management or related domains, including leading large-scale programs in cloud-first and hybrid environments. - Deep security expertise with a track record of turning vulnerability data into prioritized, owned, and verified remediation. - Hands-on experience building/deploying AI/LLM-based agents or multi-agent systems for security/engineering workflows (orchestration, tool use, evaluation). - Knowledge of approval workflows, audit logging, and rollback controls for automated remediation (and the risks of agent-driven changes). - Proficiency in one or more languages (e.g., Python, Go, Java) and strong scripting for automation/integration. - Expert experience with vulnerability/exposure platforms (e.g., Tenable, Qualys, Rapid7) and CTEM/attack surface/attack-path analysis tooling. - Strong risk-based prioritization skills (CVSS, EPSS, CISA KEV, reachability analysis, threat intelligence feeds). - Experience with AWS/Azure/GCP, container/Kubernetes security, and IaC (Terraform/CloudFormation) for automated remediation. - Experience with CI/CD pipelines, SCA/SAST tooling, and software supply chain security (SBOMs, dependency mapping). - Knowledge of UNIX/Linux, macOS, Windows, networking, and databases. - Experience with risk management aligned to organizational risk tolerance and compliance (e.g., SOC 2, GxP). -
Listing freshness
CronJobs last confirmed this listing 59m ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.