| Job Description: |
Role Overview
This role is part of a dedicated “Risk Factory” pod focused on aggressively reducing High and Critical vulnerabilities across enterprise applications while building automation and guardrails to prevent recurrence. The engineer will work across the full vulnerability lifecycle—from detection intake to remediation and automation—leveraging advanced tooling, SEC API orchestration, and AI-driven systems like Matador AI.
Key Responsibilities
· Triage, analyze, and remediate High/Critical vulnerabilities across:
o SAST, DAST, SCA, Secrets, Containers, SaaS security findings
· Consume and act on vulnerability data from SEC API orchestration pipelines
· Perform hands-on secure code fixes and directly raise PRs to application teams (skip-ticket model)
· Prioritize remediation based on risk, exploitability, and business impact
· Drive reduction of backlog (~25K+) and aging vulnerabilities (>30 days)
· Develop and implement automation for triage, routing, and remediation workflows
· Build/extend AI-assisted remediation solutions and custom automation harnesses
· Improve ownership clarity (repo mapping, stale/invalid cleanup)
· Implement guardrails to prevent reintroduction of vulnerabilities
· Collaborate with Dev, DevOps, and Security teams to accelerate closure and reduce friction
Required Skills
· Strong expertise in Application Security (OWASP Top 10, CWE, secure coding practices)
· Hands-on experience with tools like Cycode, Checkmarx, Fortify, Veracode, Burp Suite
· Proficiency in Java / Python / .NET / JavaScript (any 1–2 strongly)
· Experience with CI/CD, DevSecOps, and API security
· Ability to handle high-volume vulnerability triage and remediation
· Strong scripting/automation skills (Python preferred)
· Experience with API integrations and workflow automation
Good to Have
· Exposure to AI/ML, LLMs, or agentic security systems (e.g., Matador AI)
· Experience in automation-led remediation or security platforms
· Domain exposure to healthcare / regulated environments
Role Descriptions: Vulnearability Assessment and remediation
Essential Skills: Vulnearability Assessment and remediation
Desirable Skills:
Keyword:
Skills: Cyber Security-ASM - Application Security
Experience Required: 6-8 |
