Staff Security Operations Engineer

Lead and mature enterprise Attack Surface and Vulnerability Management capabilities across cloud, infrastructure, endpoints, applications, and internet-facing environments.

Drive risk-based vulnerability prioritization using asset criticality, exposure, exploitability, known exploitation, threat intelligence, and compensating controls.

Establish operating processes, remediation SLAs, KPIs/KRIs, dashboards, and governance to measure and drive security risk reduction.

Identify systemic security gaps and develop scalable technical and operational solutions.

Proven experience building, operating, or significantly improving an enterprise Vulnerability Management or Attack Surface Management program.

Strong understanding of asset discovery, vulnerability lifecycle, risk-based prioritization, remediation governance, and exposure management.

Hands-on technical experience with platforms such as Tenable, Qualys, Wiz, Prisma Cloud, Zscaler, CrowdStrike, Splunk, or comparable technologies.

Experience with security automation, REST APIs, scripting, and SOAR, with the ability to guide engineers in building scalable solutions.