Senior Security Engineer, Vulnerability Management

📋 Description

• Lead end-to-end response to product security incidents, from discovery, triage, remediation, and
• Own and evolve PSIRT functions, including incident classification, severity models, escalation
• Drive coordinated vulnerability disclosure processes with bug bounty programs and external
• Serve as primary coordinator across Product Security, Engineering, Legal, Communications, and
• Lead post-incident reviews and translate findings into systemic improvements.
• Develop and maintain incident response tooling and automation to reduce time-to-detect/response.

🎯 Requirements

• 5+ years of career experience in IT or Engineering with a security focus
• Hands-on incident response experience in a product or SaaS context
• Experience with coordinated vulnerability disclosure (CVD) and external researchers
• Strong judgment under pressure with incomplete information
• Experience building incident response capabilities (playbooks, runbooks, severity frameworks
• Experience drafting customer security advisories/CVEs/public incident communications

🎁 Benefits

• Remote-first company with US/Canada remote opportunity
• Competitive base salary with benefits, PTO, RSU, and retirement matching
• Equity grant and incentive programs where applicable
• AI-enabled security and tooling initiatives within the role
• Collaborative, transparent culture focused on security and impact
• Flexible travel for in-person engagement as needed