Senior Security Research Engineer

Join SIE's Global Vulnerability Management team as a Senior Security Research Engineer. In this role, you will lead complex workstreams that advance our Threat Exposure Management capability and support our transition to a Continuous Threat Exposure Management operating model. You will partner with various teams to improve how SIE discovers, prioritizes, validates, and mobilizes action on security risks. Additionally, you will conduct hands-on vulnerability research and technical analysis, develop risk-based prioritization, and lead security validation activities. You will also communicate vulnerability trends and program outcomes to technical, operational, and leadership audiences.

• Lead complex Global Vulnerability Management workstreams that advance SIE’s Threat Exposure Management capability and transition toward a Continuous Threat Exposure Management operating model.
• Translate annual TEM goals into defined delivery plans, milestones, success measures, dependencies, and repeatable operating practices. Monitor progress, identify barriers, and adjust execution to improve outcomes.
• Lead hands-on vulnerability research and technical analysis to confirm security conditions, eliminate false positives, characterize exploitability and business impact, and provide actionable remediation or mitigation guidance.

• Experience analyzing and contextualizing security data to connect technical findings with asset, service, business, threat, control, and remediation information
• Knowledge of adversarial tactics, exploitation techniques, threat intelligence, and attack frameworks such as MITRE ATT&CK, with the ability to apply that information to vulnerability prioritization
• Experience leading complex technical workstreams across multiple teams, translating objectives into delivery plans, and achieving measurable outcomes without relying on direct reporting authority
• Hands-on experience with vulnerability research, technical analysis, security validation, risk-based prioritization, and remediation or mitigation guidance
• Experience using scripting, programming, APIs, or automation to improve security analysis and operational workflows. Relevant technologies may include Python, SQL, Bash, PowerShell, JavaScript, or comparable languages
• 8+ years of relevant experience in information security, information technology, systems engineering, or a related field, including substantial experience in vulnerability management, security research, or exposure management
• Familiarity with software engineering practices such as version control, testing, code review, CI/CD, reusable components, and controlled production releases
• Experience assessing vulnerabilities across several technology domains, such as operating systems, networks, cloud services, applications, endpoints, containers, databases, or hybrid infrastructure
• Experience mentoring engineers or analysts and influencing technical practices across teams
• Ability to communicate complex security conditions, priorities, tradeoffs, and recommendations clearly to technical, operational, and leadership audiences
• Bachelor’s degree or equivalent in computer science, information security, or a related discipline
• Experience with vulnerability discovery, assessment, validation, or exposure-management platforms and their supporting integrations
• Experience helping evolve a traditional vulnerability-management function toward a TEM or CTEM operating model
• Experience with continuous security validation, adversarial exposure validation, exploit research, or proof-of-concept development
• Experience with security-data and analytics platforms such as Snowflake, Domo, or comparable technologies
• Experience securing cloud, container, application, or build-pipeline environments and integrating security capabilities into engineering workflows
• Experience applying automation, advanced analytics, or AI-enabled capabilities to vulnerability analysis, prioritization, validation, or remediation workflows