Vulnerability & Exposure Management Engineer

🔥 15 hours ago

🇺🇸 United States – Remote

💵 $152k - $185k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👷🏻‍♀️ Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Datavant

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2017

⚕️ Healthcare Insurance

☁️ SaaS

🏢 Enterprise

💰 $40M Series B on 2020-10

Healthcare Insurance • SaaS • Enterprise

Datavant is a company that provides a platform and network focused on making health data secure, accessible, and usable across the healthcare ecosystem. With a focus on data connectivity and interoperability, Datavant facilitates the movement of healthcare records across a vast network of organizations, including hospitals, clinics, health systems, and data partners. Their suite of products and solutions covers areas such as health data exchange, data transformation, and privacy compliance, serving various clients including health plans, healthcare providers, life sciences, and government organizations. Datavant's mission is to advance human health through improved data exchange and analytics.

📋 Description

• Contribute to the design, implementation, and operation of Datavant’s vulnerability and exposure management capabilities, with a focus on reducing real exploit risk. • Build and enhance automation and workflows that ingest, normalize, and prioritize vulnerability signals across multiple sources. • Develop and improve engineer-facing dashboards and integrations that help teams understand and act on vulnerability risk. • Work with product and engineering teams to assess vulnerability findings, explain exploitability and impact, and support practical remediation or mitigation approaches. • Help embed vulnerability signals into existing engineering workflows (CI/CD, PRs, backlogs) to improve visibility and adoption. • Support validation of remediation efforts to ensure exposure is meaningfully reduced. • Assist in translating compliance and control requirements into scalable technical implementations. • Support FedRAMP and other assessments by validating technical evidence and remediation outcomes. • Execute technical projects that improve vulnerability visibility, prioritization, and risk reduction. • Contribute to improving processes, tooling, and automation within the vulnerability management program.

🎯 Requirements

• Solid technical experience in vulnerability management and application security, with hands-on exposure to assessing and prioritizing vulnerability findings. • Demonstrated ability to build or automate technical workflows using scripting or programming languages such as Python or Go. • Experience working with application, cloud, or container security in AWS and/or Azure environments. • Working knowledge of security controls and compliance frameworks (e.g., NIST, CIS, FedRAMP), with the ability to apply requirements in practical engineering contexts. • Ability to reason about exploitability, exposure, and impact beyond severity scores. • Experience collaborating with engineering teams to support remediation efforts. • Clear communication skills and ability to explain technical risk to varied audiences. • Ability to operate effectively in fast-paced environments with evolving priorities. • Foundational understanding of how vulnerability management fits within broader security and engineering functions. • Experience with commercial security tooling (e.g., SAST, SCA, cloud security platforms) and ability to interpret tool outputs critically.

🏖️ Benefits

• Health insurance • 401(k) matching • Flexible work hours • Paid time off • Remote work options