Staff Vulnerability Management Engineer

Job Summary

To lead efforts in AI supply chain security, the full-time remote Staff Vulnerability Management Engineer will manage a pipeline of novel vulnerabilities, coordinate with industry bodies, and influence standards while owning technical challenges.

Key responsibilities

• Own the measurement, disclosure, and reporting of vulnerabilities identified weekly
• Coordinate with organizations like the Linux Foundation and CISA to guide industry direction
• Run the CNA program to assign new CVEs and manage internal and external embargoes

Required qualifications

• 7+ years in software security, open source maintenance, or vulnerability disclosure management
• Strong understanding of responsible disclosure practices
• Practical expertise in automating pipelines and processes at scale
• Deep experience with open source communities
• Experience coordinating with public sector or industry standards bodies