Security Automation Engineer / Vulnerability Management Engineer
Job Summary
We are seeking a Security Automation Engineer with strong software engineering expertise to build and scale automated vulnerability management and security operations capabilities. This role combines security engineering, automation development, threat intelligence integration, and risk management to transform manual security workflows into intelligent, scalable solutions.
The ideal candidate will have experience building automation platforms, integrating security data sources, implementing risk-based prioritization, and developing remediation workflows that improve organizational security posture.
Key Responsibilities
Security Automation & Pipeline Engineering
- Design, develop, and maintain automated vulnerability ingestion and enrichment pipelines.
- Integrate data from multiple security platforms, asset inventories, endpoint security tools, attack surface management solutions, and threat intelligence sources.
- Build scalable data processing and normalization frameworks to support enterprise vulnerability management.
Risk-Based Prioritization
- Develop automated risk-scoring and defect prioritization mechanisms.
- Implement intelligent routing and workflow automation to reduce manual triage efforts.
- Apply exploitability and threat intelligence signals to improve remediation prioritization.
Threat Intelligence Integration
- Incorporate indicators such as EPSS, CVSS, and CISA KEV into risk assessment workflows.
- Collaborate with security teams to operationalize threat intelligence within remediation and ticketing systems.
- Maintain risk tracking and residual risk reporting processes.
Automated Remediation
- Develop automated remediation workflows and security orchestration capabilities.
- Support AI-assisted remediation initiatives, including automated code recommendations and pull request generation.
- Implement policy guardrails and governance controls to ensure secure deployment practices.
Security Defect Management
- Enforce security defect lifecycle standards through automation.
- Ensure automated tickets include accurate severity, prioritization, ownership attribution, and remediation requirements.
- Improve workflow efficiency by reducing manual review and operational overhead.
Analytics & Continuous Improvement
- Analyze vulnerability trends and security policy violations.
- Develop preventive controls and automation strategies to reduce recurring security defects.
- Create reporting and metrics that support risk reduction initiatives.
Required Qualifications
Software Engineering
- Strong proficiency in Python, Go, or comparable programming languages.
- Experience developing REST API integrations, automation services, and data processing solutions.
- Strong background in software development, scripting, and workflow automation.
Cybersecurity Expertise
- Experience with Vulnerability Management and Security Defect Management programs.
- Understanding of Attack Surface Management (ASM) and Cloud Security Posture Management (CSPM).
- Knowledge of enterprise security operations and security engineering practices.
Risk & Threat Intelligence
- Experience applying CVSS, EPSS, CISA KEV, and related exploitability frameworks.
- Ability to programmatically correlate threat intelligence with asset and vulnerability data.
- Understanding of risk-based remediation and prioritization methodologies.
Data Engineering & Automation
- Experience aggregating and normalizing data from multiple security platforms.
- Ability to build scalable risk models and data correlation frameworks.
- Strong analytical and problem-solving skills.
Preferred Attributes
- Builder mindset with a passion for automation and operational excellence.
- Experience modernizing manual workflows through engineering solutions.
- Strong collaboration and communication skills.
Education
- Bachelor's degree in Computer Science, Cybersecurity, Software Engineering, Information Systems, or related field.
- Equivalent practical experience in security automation, security engineering, or software development will also be considered.
Security Automation Engineer, Vulnerability Management Engineer, Security Engineer, Security Software Engineer, Security Platform Engineer, Cybersecurity Engineer, Application Security Engineer, DevSecOps Engineer, Cloud Security Engineer, Threat Intelligence Engineer, Security Operations Engineer, Python, Go, Golang, REST API, API Integration, Automation Engineering, Security Automation, Workflow Automation, Vulnerability Management, Vulnerability Assessment, Defect Management, Security Defect Management, Attack Surface Management, ASM, Cloud Security Posture Management, CSPM, Threat Intelligence, Risk Scoring, Risk Prioritization, Risk Management, Security Analytics, Data Engineering, Data Aggregation, Data Correlation, Security Operations, Security Orchestration, SOAR, Endpoint Security, CrowdStrike, Asset Inventory, CVSS, EPSS, CISA KEV, KEV, Exploitability Analysis, Remediation Automation, Automated Remediation, AI-Assisted Remediation, Agentic AI, AI Automation, Auto PR Generation, Security Governance, Security Controls, Root Cause Analysis, Security Metrics, Enterprise Security, Offensive Security, Application Security, Cloud Security, Software Engineering, Secure Development, Ticketing Automation, Security Compliance, Security Platform Development, Security Workflow Engineering, Threat Exposure Management, Risk-Based Vulnerability Management, Security Data Pipelines, Security Engineering Automation, Security Tool Integration, Vulnerability Prioritization, Security Program Automation, Continuous Improvement, Builder Mindset, Scalable Automation, Enterprise Cybersecurity, Security Architecture, Security Infrastructure, DevOps, CI/CD Security, Platform Engineering, Threat Modeling, cyber security, information security, infosec, security automation developer, vulnerability automation engineer, remediation engineer, risk engineer, security analytics engineer.
