Staff Vulnerability Management Engineer

Job Summary

To lead the charge in AI supply chain security, the full-time Staff Vulnerability Management Engineer will manage a pipeline of novel vulnerabilities, coordinate industry responses, and represent the company in external engagements while working remotely.

Key responsibilities

• Own the measurement, disclosure, and reporting of thousands of novel vulnerabilities weekly
• Coordinate with industry bodies and guide the direction of vulnerability management standards
• Run the CNA program to assign new CVEs and manage internal and external embargoes

Required qualifications

• 7+ years in software security, open source maintenance, or vulnerability disclosure management
• Strong understanding of responsible disclosure practices
• Practical expertise in automating pipelines and processes at scale
• Deep experience with open source communities
• Experience coordinating with public sector or industry standards bodies