Senior Product Security & Vulnerability Management Engineer

We are seeking a Senior Product Security & Vulnerability Management Engineer to lead vulnerability management, application security testing, and product security operations across the enterprise. This role will serve as the primary security partner to Product Engineering, DevOps, and Cloud teams, helping identify, prioritize, remediate, validate, and report security risks across applications, cloud environments, infrastructure, and software development pipelines.

The ideal candidate combines hands-on technical expertise with strong program coordination skills. The role requires someone who can operate security tooling, challenge and validate findings, work effectively with engineering teams, and maintain enterprise-level visibility of remediation performance and risk.

* Conduct in-depth analysis of security alerts and incidents to determine the root cause and impact. * Utilize incident response plans, including containment, eradication, and recovery strategies. * Lead investigations into security breaches and incidents, documenting findings and recommendations for remediation. * Assist in the development and enforcement of security policies, procedures, and best practices. * Collaborate with cross-functional teams to assess security risks associated with new projects and initiatives. * Provide guidance and mentorship to Level 1 Security Analysts, helping them enhance their skills and knowledge. * Monitor and analyze security logs and data sources to proactively identify emerging threats and vulnerabilities. * Stay abreast of industry trends, emerging threats, and best practices in cybersecurity. * Play a key role in the creation and maintenance of playbooks and SOPs.

* Minimum five years of experience in cybersecurity, product security, application security, vulnerability management, DevSecOps, or a related discipline. * Hands-on experience operating an enterprise vulnerability management platform such as Qualys, Tenable, Rapid7, or an equivalent solution. * Experience with application security testing, including SAST, DAST, SCA, secrets scanning, and Infrastructure as Code scanning. * Experience with GitHub Advanced Security, Checkmarx, Burp Suite, or comparable technologies. * Demonstrated ability to work directly with software engineering, DevOps, Cloud, and technology operations teams to triage and remediate findings. * Working knowledge of secure software development, OWASP guidance, cloud security, modern CI/CD practices, and vulnerability remediation workflows. * Experience coordinating third-party penetration tests and tracking findings through validation and closure. * Ability to communicate technical risk clearly to engineering teams, control owners, GRC stakeholders, and leadership. * Strong organizational skills and the ability to oversee multiple workstreams across a distributed enterprise.