Senior Security Research Engineer
Skills
Computer ScienceAmdocs CRMContextDatabasesInformation Security AnalysisSnowflake CloudTEM
What the job involves
The main requirements, responsibilities and hiring steps.
Requirements
- 8+ years of relevant experience in information security information technology systems engineering or related field
- Bachelor’s degree or equivalent in computer science information security or related discipline
- Experience leading complex technical workstreams across multiple teams and delivering measurable outcomes
- Hands-on experience with vulnerability research technical analysis security validation risk-based prioritization and remediation guidance
- Experience assessing vulnerabilities across operating systems networks cloud services applications endpoints containers databases or hybrid infrastructure
- Experience with vulnerability discovery assessment validation or exposure-management platforms and integrations
- Knowledge of adversarial tactics exploitation techniques threat intelligence and MITRE ATT&CK
- Experience using scripting programming APIs or automation such as Python SQL Bash PowerShell or JavaScript
- Experience analyzing security data and connecting findings with asset service business threat control and remediation information
- Familiarity with software engineering practices including version control testing code review CI/CD reusable components and controlled releases
- Ability to communicate complex security conditions priorities tradeoffs and recommendations clearly
- Experience mentoring engineers or analysts and influencing technical practices across teams
Nice to have
- Risk focused
- Analytical thinking
- Cross-functional leadership
- Technical curiosity
- Clear communicator
- Mentoring mindset
Day to day
- Lead complex vulnerability management workstreams that strengthen Threat Exposure Management and guide the shift to a Continuous Threat Exposure Management operating model.
- Conduct hands-on vulnerability research and technical analysis to validate security conditions, reduce false positives, assess exploitability, and deliver practical remediation guidance.
- Partner with security, engineering, and business teams to prioritize risk, mobilize remediation, improve data and automation, and communicate clear outcomes to stakeholders.