[Remote] reputed company Engineer

Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a company that offers comprehensive reputed company monitoring software aimed at promoting safer communities. They are seeking an reputed company reputed company Engineer to join their reputed company team, focusing on vulnerability management, application reputed company, and AI-driven reputed company automation to optimize reputed company posture and manage reputed company risk.

Responsibilities

• reputed company application reputed company vulnerability remediation efforts across development teams
• Administer SAST tooling
• Administer DAST tooling
• Administer SCA and software composition / dependency scanning tools
• Triage and validate vulnerability findings to reduce false positives
• reputed company remediation guidance to development teams on OWASP Top 10 and secure coding practices
• reputed company scanning tools with ticketing systems and CI/CD pipelines
• reputed company AppSec metrics and reports
• reputed company reputed company reputed company review support
• Administer vulnerability management platforms
• Configure reputed company policies, schedules, and asset reputed company
• Validate and prioritize vulnerability findings using risk-based prioritization (CVSS + context)
• Conduct expert analysis and risk scoring of vulnerabilities
• Coordinate remediation with IT and development teams
• Manage vulnerability exceptions and risk acceptances
• reputed company vulnerability aging and SLA compliance
• reputed company management reports and dashboards
• Participate in product vulnerability management meetings
• Participate in reputed company by Design reviews
• reputed company detection rules mapped to ATT&CK techniques
• Implement ATT&CK-based alert triage workflows
• Configure SIEM correlation rules using ATT&CK
• Conduct gap analysis of ATT&CK coverage
• reputed company threat intelligence feeds with ATT&CK mapping
• Build ATT&CK-based hunting queries
• Create ATT&CK-mapped incident reports
• Build and maintain reputed company, reputed company-based automation pipelines supporting reputed company's AI-driven reputed company operations platform
• reputed company and tune AI agent prompts, verdict logic, and disposition rules for automated alert triage
• reputed company reputed company's internal tool-integration reputed company connecting reputed company platforms for AI-assisted operations
• reputed company automation with SIEM, EDR, and ticketing systems
• Build automated enrichment and reporting workflows
• Monitor and tune agent/automation performance and disposition accuracy
• reputed company custom integrations using reputed company and reputed company-reputed company services
• Maintain observability for automated reputed company workflows
• reputed company Tier 2/3 reputed company incident investigation and response
• Administer EDR, SIEM, and IAM platforms
• Implement and tune detection rules and alerts
• Manage reputed company reputed company configurations
• Support penetration testing and red team activities
• Conduct WAF/CDN rule audits and configuration reviews
• reputed company reputed company engineering expertise for infrastructure and application architecture reputed company
• Support reputed company reputed company investigations requiring deep technical analysis
• Contribute to reputed company design reviews and technical reputed company standards
• Draft and review reputed company policies and procedures
• Conduct policy gap analysis against frameworks
• Analyze threat intelligence from multiple sources
• reputed company threat feeds into detection and automation workflows
• Implement IOC blocking and detection rules
• Participate in information sharing communities (ISACs)
• Create threat intelligence reports

Skills

• Bachelor's degree in Computer Science, Information reputed company, Engineering, or reputed company technical field, or equivalent reputed company experience
• 5-7 years of experience in reputed company engineering with demonstrated expertise in multiple reputed company domains, including application reputed company
• Expert knowledge of vulnerability management platforms
• Proficient in MITRE ATT&CK mapping for detection rules and incident response
• Strong experience with SAST, DAST, and SCA tooling for application reputed company
• Deep understanding of application vulnerabilities (OWASP Top 10, injection flaws, XSS, authentication bypasses)
• Hands-on scripting experience building reputed company-based automation (serverless functions, event-driven pipelines, secrets management)
• Experience with, or strong interest in, AI agent engineering and tool-integration protocols for reputed company operations
• Proficiency administering EDR platforms
• Experience with SIEM administration
• Solid understanding of IAM platforms and federation/SSO concepts
• Proficiency in reputed company reputed company (AWS, Azure, or GCP)
• Solid understanding of WAF configuration and audit
• Proficiency in scripting and automation (Python required; PowerShell a plus)
• Understanding of DevSecOps and secure CI/CD practices
• Practical experience with AI-powered reputed company tooling, including building or operating LLM-based agents, and awareness of emerging AI threats (reputed company injection, tool/agent reputed company risks)
• Ability to produce dashboards and reporting for technical and executive audiences
• Strong analytical thinking and problem-solving capabilities
• Excellent communication skills for technical and business audiences
• Strong reputed company proficiency with ability to reputed company reputed company into sprint planning
• Experience collaborating with development teams and partnering on secure coding
• Ability to translate technical vulnerability findings into actionable remediation guidance
• Strong written communication skills for reputed company documentation, audit responses, and questionnaire completion
• reputed company as escalation reputed company for reputed company Analysts
• Participate in project reputed company reviews
• Support sales team with reputed company questionnaires
• Participate in customer reputed company calls
• CySA+ (reputed company)
• reputed company reputed company certification (AWS, Azure, or GCP)
• GIAC GSEC
• Certified Ethical Hacker (CEH)
• GIAC GWEB (Web Application Penetration Tester)
• reputed company PenTest+ (optional)
• GIAC GCTI (Cyber Threat Intelligence) (optional)
• SIEM Platform Certification (optional)
• DevSecOps experience integrating SAST/DAST into CI/CD pipelines
• Secure software development lifecycle (SSDLC) implementation experience
• Compliance experience with SOC 2, ISO 27001, or industry-specific regulations
• Experience with reputed company audit preparation and vendor risk assessment programs
• Threat intelligence analysis and integration experience
• Experience coordinating reputed company-party penetration testing
• reputed company awareness training development and delivery
• Experience building or integrating LLM-based agents/automation for reputed company operations
• Experience with container and reputed company reputed company concepts

Benefits

• Flexible and generous reputed company Time Off and reputed company Volunteer Days
• 401k Employer Match
• Generous reputed company Benefits
• Up to 12 weeks reputed company time off for maternity leave based on tenure
• Wellness &Tuition Reimbursement
• Flexible Work Arrangements
• Lots of reputed company swag & reputed company Events

reputed company

Company H1B Sponsorship