Vulnerability Management Engineer

Job not on LinkedIn

🔥 2 minutes ago

🌐 Colombia, Costa Rica, +1 more countries – Remote

🇨🇴 Colombia – Remote 🇨🇷 Costa Rica – Remote 🇲🇽 Mexico – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👷🏻‍♀️ Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Backblaze

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2007

🛍️ eCommerce

🏢 Enterprise

💰 $5M Series A on 2012-07

Cloud Storage • eCommerce • Enterprise

Backblaze is a cloud storage company that provides scalable and secure data backup solutions for both businesses and individuals. Their B2 Cloud Storage service offers S3 compatible object storage, allowing users to easily protect and manage their data with transparent pricing. Backblaze specializes in automatic and unlimited backup services for computer systems, ensuring data protection and recovery options for users, while also supporting integration with applications for enhanced functionality.

📋 Description

• Drive risk-based vulnerability and exposure management across infrastructure, applications, cloud services, endpoints, and software dependencies • Correlate threat intelligence and vulnerability findings with asset inventory, software and system configuration, application testing, network exposure, ownership, and business criticality • Assess exploitability and reachability rather than relying on vulnerability severity alone • Incorporate exploit prediction, known exploitation, open-source threat intelligence, adversary activity, and environmental context into prioritization • Determine whether exposure requires immediate incident response or remediation under established operational objectives • Use AI-assisted workflows to ingest and correlate vulnerability intelligence against the organization's technology configuration while independently validating conclusions • Partner with Red Team to validate practical exploitability of significant vulnerabilities • Identify compensating controls such as configuration changes, access restrictions, segmentation, or filtering when immediate patching is impractical • Automate vulnerability ingestion, analysis, prioritization, remediation tracking, mitigation, and verification where appropriate

🎯 Requirements

• Experience with enterprise vulnerability or exposure management • Strong understanding of infrastructure, applications, cloud, containers, networking, and software dependencies • Experience interpreting vulnerability intelligence and assessing practical exploitability • Knowledge of risk-based prioritization techniques including CVSS, exploit prediction, known-exploitation intelligence, and environmental context • Experience correlating vulnerability, asset, configuration, SAST, DAST, SCA, endpoint, or related security data • Experience with scripting, automation, or data analysis • Strong understanding of OWASP Top 10, MITRE ATT&CK, MITRE D3FEND, and STRIDE • Familiarity with OWASP Top 10 for LLM, OWASP Top 10 for Agentic Applications, MITRE ATLAS and MAESTRO • Familiarity with continuous exposure management, attack-path analysis, AI-assisted analysis, or automated mitigation is preferred

🏖️ Benefits

• Equal Opportunity Employer commitment • Diversity, equity, and inclusion values • Inclusive workplace where employees can express their true selves and do their best work