Security Platform Engineer - Poly

📋 Description

• Own intake, triage, and tracking of reported vulnerabilities, from CVE feeds, scanners, customers
• Assess exploitability and impact on our products, and recommend next steps: patch, mitigate, or
• Drive fixes with development teams and track them through to release
• Produce vulnerability status reports and advisories for engineering and leadership
• Generate and maintain SBOMs for every product release, covering Android, Linux, and third-party
• Automate SBOM generation and vulnerability matching in the build pipeline

🎯 Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or a related field
• 4+ years in product security, application security, DevSecOps, or security engineering
• Hands-on vulnerability management: CVE triage, CVSS scoring, exploitability assessment, and
• Experience generating and analyzing SBOMs (SPDX or CycloneDX) and using software composition
• Hands-on penetration testing of network services, web interfaces, or APIs, with tools such as Burp
• Python scripting for security automation

🎁 Benefits

• Health insurance
• Dental insurance
• Vision insurance
• Long term/short term disability insurance
• Employee assistance program
• Flexible spending account