Lead Engineer, Vulnerability & Exposure Management (f/m/d)

Overview

Lead the engineering implementation of vulnerability and exposure management workflows, including scanning, data processing, prioritization, ticketing, reporting, and automation. The role is remote in Poland and reports to the Senior Manager, Exposure Management.

What you'll do

• Engineer scan coverage and vulnerability data ingestion pipelines.
• Normalize and prioritize vulnerability and exposure data.
• Build Python, SQL, and API automation for prioritization and SLA logic.
• Integrate vulnerability, ticketing, cloud, and endpoint data sources.
• Implement and refine the CTEM operating model.
• Create runbooks, data-quality checks, and service-ownership mapping.

What you'll need

• 5+ years of experience in vulnerability management or security engineering.
• Hands-on experience with vulnerability and exposure tools such as Tenable, Qualys, Rapid7, CrowdStrike FEM, or Defender.
• Experience with scan coverage, authenticated scanning, and data normalization.
• Experience building integrations using Python, SQL, and REST APIs.
• Experience with risk-based prioritization using EPSS, CISA KEV, threat intelligence, and asset context.
• One listed certification, such as CrowdStrike CCFA, Tenable VM Specialist, Qualys VMDR, GIAC GSEC/GMON, or a cloud security certification.

Nice to have

• Bachelor's degree in a related field.
• Experience with attack surface management, cloud posture, or container/Kubernetes exposure.
• Experience with patch/remediation orchestration tools such as BigFix, SCCM/MECM, or Red Hat Satellite.

Details

• Work mode: Remote.
• Location: Poland.