Vulnerability Engineer

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Domino Data Lab

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2013

🤖 Artificial Intelligence

🏢 Enterprise

☁️ SaaS

💰 Series F on 2022-06

Artificial Intelligence • Enterprise • SaaS

Domino Data Lab is a company that empowers AI-driven enterprises to build and manage AI at scale through its Enterprise AI Platform. The platform provides an integrated experience for model development, MLOps, collaboration, and governance, enabling global enterprises to innovate across various sectors. Domino supports better medicinal development, productive agriculture, and competitive product creation. Established in 2013 and backed by notable investors like Sequoia Capital and NVIDIA, Domino enables companies to optimize AI deployment effectively.

📋 Description

• Own first-pass CVSS scoring and exploitability analysis for vulnerability risk assessments • Reproduce and confirm customer-reported and penetration-test findings before escalation to Engineering • Maintain SAST/DAST and vulnerability-scanning automations, troubleshoot failures, and tune configurations • Build or run proof-of-concept exploits for selected CVEs • Partner with Engineering to prioritize and ship vulnerability fixes • Support the Staff Security Engineer by handling day-to-day vulnerability-management workload

🎯 Requirements

• Hands-on experience managing vulnerabilities for a large SaaS product across OS, container, and dependency exposure • Experience triaging and tracking CVEs for a SaaS or containerized product • Experience reproducing and validating customer-reported or penetration-test vulnerabilities • Experience with vulnerability-scanning tools such as Prisma Cloud/Twistlock, JFrog, or Trivy • Ability to build or maintain SAST/DAST pipeline automation • Experience partnering with Engineering to prioritize and ship fixes • Background in a highly regulated environment or modern software company • Strong scripting ability; Python preferred • Working knowledge of CVSS v3.1/v4.0 scoring • Exploit development or proof-of-concept skills, including tools such as Burp Suite • Familiarity with OWASP Top 10 and testing methodology • Working knowledge of containers, Kubernetes, Linux, AWS, and networking fundamentals • Understanding of authentication/authorization and API security fundamentals • Basic threat-modeling ability • Clear communication and ability to draft risk statements for non-technical audiences • Ability to operate with ambiguity • OSWA, OSWE, or similar offensive-security certification is nice to have • Familiarity with Airflow and Snowflake is nice to have

🏖️ Benefits

• Teaching and learning environment with tools needed for success • Diverse and inclusive workplace • Growth mindset and opportunities for improvement