Salary not listed
Vulnerability Management Engineer
DevOpsWorkplace — unknown
Published on 2026-10-19
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Drive risk-based vulnerability and exposure management across infrastructure, applications, cloud services, endpoints, and software dependencies. Correlate threat intelligence and technical context to assess exploitability, prioritize risk, and coordinate remediation or mitigation.
About the company
Backblaze provides cloud object storage and backup services for individuals and businesses. It serves teams that need affordable, durable storage and simple data protection.
What you'll do
- Correlate vulnerability and threat intelligence with asset, configuration, application, network, ownership, and business-criticality data
- Assess practical exploitability and reachability, not just severity scores
- Prioritize exposures using exploit predictions, known exploitation, adversary activity, and environmental context
- Determine whether exposures require incident response or planned remediation
- Use AI-assisted workflows to analyze vulnerability intelligence and independently validate conclusions
- Partner with Red Team to test practical exploitability
- Identify compensating controls when immediate patching is impractical
- Automate vulnerability analysis, prioritization, remediation tracking, mitigation, and verification
What we're looking for
- Experience with enterprise vulnerability or exposure management
- Strong understanding of infrastructure, applications, cloud, containers, networking, and software dependencies
- Experience interpreting vulnerability intelligence and assessing exploitability
- Knowledge of CVSS, exploit prediction, known-exploitation intelligence, and contextual risk prioritization
- Experience correlating security data such as vulnerability, asset, configuration, SAST, DAST, SCA, or endpoint findings
- Scripting, automation, or data-analysis experience
- Understanding of OWASP Top 10, MITRE ATT&CK, MITRE D3FEND, and STRIDE
Nice to have
- Familiarity with continuous exposure management, attack-path analysis, AI-assisted analysis, or automated mitigation
- Familiarity with OWASP Top 10 for LLM and Agentic Applications, MITRE ATLAS, and MAESTRO