Vulnerability Engineer

Overview

Vulnerability Engineer for Domino’s Security team, supporting vulnerability management across OS, container, and dependencies to deliver faster, consistent risk assessments.

What you'll do

• Own first-pass CVSS scoring and exploitability analysis.
• Reproduce and validate customer-reported and pen-test findings.
• Maintain SAST/DAST and vulnerability scanning automations and troubleshoot failures.
• Build or run PoC exploits on selected CVEs for validated risk.
• Collaborate with Engineering to prioritize vulnerability fixes.
• Reduce day-to-day load carried by a Staff Security Engineer.

What you'll need

• Hands-on vulnerability management experience for a large SaaS product across OS, container, and dependency exposure.
• Experience triaging and tracking CVEs, including reading scan reports and driving resolution.
• Ability to reproduce and validate reported vulnerabilities (customer disclosures or pen test findings).
• Time spent with vulnerability scanning tools such as Prisma Cloud/Twistlock, JFrog, or Trivy.
• Experience building or maintaining SAST/DAST pipeline automation.
• Strong scripting ability, with Python preferred.
• Knowledge of CVSS v3.1/v4.0 scoring and assessing risk/judgment beyond reporting.

Details

• Work mode: Remote (Remote India).