Vulnerability Jobs

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We are seeking a mid-level AppSec Vulnerability Management Engineer with a strong software development background. In this role, you will bridge the gap between security, compliance, and engineering teams. You will identify application vulnerabilities, maintain software supply chain security, and drive tracking to satisfy strict regulatory compliance frameworks. You will also serve as a technical responder during security incidents, deploying real-time countermeasures to protect our software ecosystem. What You'll Do Core Responsibilities Vulnerability Scanning & Triage: Perform periodic application security scanning activities. Review results and prioritize flaws based on CVSS scores, real-world exploitability, and system exposure. Compliance-Driven Tracking: Track, document, and manage vulnerabilities according to strict compliance SLAs (e.g., SOC 2, ISO 27001, PCI-DSS). Maintain audit-ready evidence of remediation timelines and exception approvals. Executive Reporting & Alerting: Escalate and report critical exposures directly to the CISO and senior leadership. Maintain dashboards and alerting mechanisms that visualize vulnerability status, risk trends, and compliance posture. Software Supply Chain Security: Ownership of the organization's Software Bill of Materials (SBOM). Continually update SBOM inventories to ensure compliance with modern regulatory requirements and dependency tracking. Help Replit mature through various SLSA levels for supply chain security. Remediation Collaboration: Partner with development teams to provide clear mitigation paths. Review, write, and patch code directly when necessary to resolve security flaws. Tooling Integration: Configure and tune automated security te

Senior Container Security Engineer – CVE Remediation & Image Hardening About the Role We are looking for a hands-on Senior Container Security Engineer to lead vulnerability remediation and image hardening across Linux-based container environments. This role focuses on deep operating system and container security engineering rather than simple vulnerability scanning. You will analyze, remediate, rebuild, harden, and continuously optimize container images used in modern cloud-native platforms. You will work closely with platform engineering, DevOps, infrastructure, and security teams to build automated remediation pipelines, reduce the attack surface, and deliver production-ready hardened images. What You’ll Do - Own end-to-end CVE remediation across Linux-based container images. - Analyze vulnerabilities across OS packages, libraries, runtimes, and dependencies. - Patch, rebuild, validate, and maintain hardened container images at scale. - Reduce attack surface by removing unnecessary packages, binaries, services, and dependencies. - Build and scale automated remediation pipelines for continuous image patching. - Improve image security posture while minimizing operational disruption. - Generate, validate, and maintain SBOMs to support supply chain visibility and compliance. - Integrate remediation workflows into CI/CD and GitOps pipelines. - Optimize image size, startup performance, and operational efficiency. - Research emerging Linux, container, Kubernetes, and software supply chain threats. - Troubleshoot complex dependency, package compatibility, and runtime security issues. - Help define internal standards for hardened images and secure software delivery. What You Bring - 5+ years of experience in Linux systems engineering, platform engineering, DevSecOps, security engineering, or SRE. - Deep understanding of Linux distributions (Debian, Ubuntu, Alpine, RHEL). - Strong hands-on experience with Docker, Kubernetes, and

About the Team Our Safety Systems team is at the forefront of OpenAI's mission to build and deploy safe AGI, driving our commitment to AI safety and fostering a culture of trust and transparency. Within Safety Systems, the Model Policy team aligns model behavior with desired human values and norms. We co-design policy with models and for models by driving rapid policy taxonomy iteration based on data and defining evaluation criteria for foundational models’ ability to reason about safety. About the Role Frontier AI systems are rapidly expanding what is possible in cybersecurity and software engineering. These capabilities create major defensive opportunities, but they also raise serious dual-use and misuse risks across areas such as malware development, exploit discovery, vulnerability chaining, credential abuse, cyber intrusion, and autonomous offensive operations. In this role, you will help define how OpenAI’s models should behave in high-risk cybersecurity contexts. You will develop policy frameworks, threat models, taxonomies, evaluations, and behavioral specifications that guide model behavior across training, deployment, and monitoring systems. This role sits at the intersection of cybersecurity, AI safety, threat modeling, evaluation science, and policy implementation. You will work closely with research, engineering, safety training, preparedness, and product teams to build policies that are technically grounded, measurable, enforceable, and responsive to real-world cyber risk. Your Responsibilities: Design and maintain model policies for cybersecurity and frontier-risk domains, especially dual-use and high-risk cyber capabilities. Translate cybersecurity threat models into clear behavioral specifications, evaluation criteria, grading guidance, and system-level mitigations. Define practical boundaries between legitimate security research, defensive workflows, and assistance that could materially enable harmful activity. Build policy artifacts that support i

MongoDB's Global Security Organization (GSO) is looking for a Director of Global Security Operations to build and lead GSO's first dedicated team in India. This is a foundational leadership role: your first mandate is to stand up a 20-person team from scratch. This team’s first mission will be extending US based teams in three different areas: Vulnerability management - AI driven detection, triage and workflow management of vulnerabilities from code to components to applications to infrastructure Launch readiness - shifting security analysis left to proactively address security needs as far upstream from product launch as possible Core enterprise security - projects focusing on improving protection against insider threats and and newly emerging AI Governance and Security needs We are looking to speak to candidates who are based in Gurugram for our hybrid working model. Who We Are GSO secures MongoDB's products, infrastructure, and the trust our customers place in us — spanning product security, corporate security, and risk, and working across engineering, go-to-market, and corporate development to keep security moving at the same speed as the business. Responsibilities Recruit, hire, and onboard a 20-person team including 3 managers - across vulnerability management, launch readiness, and core enterprise security Stand up the operating rhythms, tooling, and documentation the India team needs to work as a first-class part of GSO from day one Get new hires productively engaged quickly and working seamlessly with required stakeholders Actively manage matrix reporting, ensuring ambiguity doesn't slow the team down — resolve competing priorities between local and functional leadership before they become the team's problem Represent the India team's capacity, constraints, and growth needs back to GSO leadership Build the durable leadership bench and processes that let the India team operate as an accountable, outcome-owning part of GSO going forward Build and lead a

We are seeking a highly skilled Assistant Vice President (AVP), Software Senior Engineer, to design, develop, and maintain robust middleware solutions. The ideal candidate will have deep expertise in Java and Spring Boot, strong database knowledge, and a passion for leveraging AI to drive productivity and innovation. Responsibilities" Design & Development : Lead development of complex middleware applications using Java and Spring Boot, leveraging AI-powered tools (Copilot, Codex) to accelerate development and enforce best practices Database Optimization : Architect and optimize database interactions with Oracle, SQL, and MongoDB, using AI to analyze performance and suggest improvements CI/CD Excellence : Drive adoption of CI/CD pipelines with AI-integrated testing, vulnerability scanning, and predictive failure analysis Collaboration : Work with cross-functional teams to define requirements and deliver high-quality software Mentorship : Guide junior engineers and foster AI-driven development practices Innovation : Research and implement AI technologies to enhance productivity and software quality Code Quality : Participate in code reviews using AI-powered analysis tools for bug detection and security scanning Problem Solving : Troubleshoot complex issues using AI-driven anomaly detection and log analysis Risk Assessment : Leverage AI for advanced risk analytics and compliance monitoring Required Technical Skills: Core Java : Strong understanding (preferably Java 11/17), multithreading, collections, garbage collection, JVM internals Frameworks : Extensive experience with Spring Framework (Spring Boot, Spring MVC, Spring Data JPA, Spring Security) Middleware : RESTful APIs, microservices architecture NoSQL Databas

NVIDIA's Automotive Offensive Security team believes the best defense is a good offense. Securing a sophisticated automotive operating system means finding vulnerabilities then building the tooling needed to find them at scale. We're looking for a senior engineer who can break low-level systems and then automate the insights gained from doing so into reusable security capabilities. What you'll be doing: You'll discover and evaluate vulnerabilities on both source code and binaries, focusing on low-level technologies such as OS kernels, Hypervisor, boot ROMs, firmware, and hardware. More than just bug finding, you'll develop and build automation to scale your work. This includes security pipelines, fuzzing infrastructure, AI-assisted vulnerability discovery, tools for automated code inspection, and code conversion. You'll work closely with security researchers and engineers, owning tool development - from prototype to production - for use across the software organization What we need to see : 7+ years of hands on programming experience, particularly with C/C++. Python and memory safe language (e.g. Rust, Ada/SPARK) proficiency a plus. B.S. or equivalent experience in Computer Science or a related field. Strong low-level systems security background: OS internals, kernels, hypervisors, firmware, or hardware; applying an analytical approach dissecting the functionality of intricate software and identifying security flaws. Experience with embe

As an AI Security Engineer , you will work at the intersection of software engineering, cybersecurity, and artificial intelligence. You will design and build security tools, assess AI-powered applications for vulnerabilities, evaluate third-party and open-source AI technologies, and help establish secure development standards for AI systems. This is a hands-on engineering role for someone who enjoys building solutions, solving complex technical problems, and exploring emerging security risks across technologies such as Generative AI, RAG, and agentic systems. What You'll Do Design, build, and implement tools for AI security testing, penetration testing, red teaming, and continuous vulnerability assessment. Develop mock and test AI applications to evaluate internal and third-party AI security solutions. Identify and assess security risks within AI-enabled applications and workflows. Develop security requirements, standards, and best practices for securely building and deploying AI applications. Evaluate third-party vendors, open-source tools, libraries, and AI technologies from a security perspective. Integrate security testing and evaluation capabilities into CI/CD pipelines and development workflows. Build scalable security tooling and automation that can be adopted across different teams and environments. Troubleshoot applications and solve complex engineering and security problems. Partner with engineering teams, security professionals, customers, vendors, and business stakeholders to understand requirements and deliver practical solutions. Create clear technical documentation covering tools, features, security assessments, testing methodologies, and findings. What You'll Bring 5+ years of software development experience building and supporting production applications. Strong hands-on programming experience with Python. Experience working with RESTful APIs and structured data formats such as JSON, XML, CSV, and HTML. Experience with CI/CD pipelines and mod

RDQ327R179 While candidates in the listed location(s) are encouraged for this role, candidates in other (US) locations will be considered. About the Team The Agentic Security Engineering team is a horizontal, shared services engineering team that enables every Databricks security function AI-native. We enable building the AI agents, "personas," and own the shared platform that security teams across the org (Detection & Response, Threat Intelligence, Vulnerability & Product Security, Red Team, GRC, and Continuous Monitoring) build on to operate at machine speed, safely and reliably. We leverage AI to transform how security is done. The Role As a Senior Staff Security Software Engineer on the Agentic Security Engineering team, you will be a senior technical authority and architect for Databricks’ shared Security AI platform. You will define the platform architecture, technical standards, and multi-year engineering direction that allow security teams to build, deploy, and operate governed AI personas safely at scale. Your work will span secure agent identity, isolation and sandboxing, policy enforcement, auditability, observability, evaluation, orchestration, and reliable integration with Databricks and security infrastructure. You will operate across organizational boundaries, aligning engineering and security leaders on platform architecture, driving adoption of common patterns, and resolving complex technical problems that affect multiple security functions. You will influence the quality, safety, reliability, and velocity of the broader Security AI ecosystem without owning the domain logic or business outcomes of every individual persona. The Impact You Will Have Shared Security AI Platform Architecture Define and evolve the architecture for the shared Security AI platform and its paved road for governed agentic workflows. Establish reusable patterns for agent identity, least-privilege access, sandboxing, egress control, secret isolation, policy enforcement

Software Systems Engineer (Associate or Experienced) Company: The Boeing Company The Boeing Company has an exciting opportunity for a Software Systems Engineer to join the SATCOM Mission Planning Software Engineering team in Seal Beach, CA. Our teams are currently hiring for a broad range of experience levels including; Associate and Experienced Software Engineers. The Satellite Communication (SATCOM) Mission Planning team is a critical part of the U.S. military’s nuclear command, control, and communications (NC3) network, providing nuclear-survivable connectivity. Our team develops software tools and services for advanced satellite and ground systems. This role offers the opportunity to work in a fast-paced development environment using modern, scalable technology and tools. Our team works in an Agile and CI/CD environment with automated testing, vulnerability scanning, and quality scanning capabilities. Position Responsibilities: Develops and maintains requirements, architecture, algorithms, interfaces, and designs for high-performance APIs between front-end and back-end software services Supports software development activities in an Agile environment using DevSecOps methodologies, including integration of completed software components into a fully functional software system Supports the development of critical features and support the full development lifecycle from design through deployment Builds, architects, and consumes APIs and backend services as part of the platform ecosystem, with an emphasis on automation, testing, and security Conducts code reviews to maintain code quality, enforce best practices, and ensure compliance wit

Software Engineer (Associate or Experienced) Company: The Boeing Company The Boeing Company has an exciting opportunity for a Software Engineer to join the SATCOM Mission Planning Software Engineering team in Colorado Springs, CO. Our teams are currently hiring for a broad range of experience levels including; Associate and Experienced Software Engineers. The Satellite Communication (SATCOM) Mission Planning team is a critical part of the U.S. military’s nuclear command, control, and communications (NC3) network, providing nuclear-survivable connectivity. Our team develops software tools and services for advanced satellite and ground systems. This role offers the opportunity to work in a fast-paced development environment using modern, scalable technology and tools. Our team works in an Agile and CI/CD environment with automated testing, vulnerability scanning, and quality scanning capabilities. Position Responsibilities: Develops and maintains requirements, architecture, algorithms, interfaces, and designs for high-performance APIs between front-end and back-end software services Supports software development activities in an Agile environment using DevSecOps methodologies, including integration of completed software components into a fully functional software system Supports the development of critical features and support the full development lifecycle from design through deployment Builds, architects, and consumes APIs and backend services as part of the platform ecosystem, with an emphasis on automation, testing, and security Conducts code reviews to maintain code quality, enforce best practices, and ensure compliance with establis

Become a part of our caring community Do you thrive on designing secure, enterprise-scale solutions that protect critical systems, data, and networks? As a Lead Security Architect in Humana, you will play a key role in shaping the security blueprint for the organization by aligning security architecture and infrastructure with enterprise business and technology priorities. In this role, you will partner with EIP and business leaders to assess emerging threats, identify architectural gaps, and design forward-looking security solutions that strengthen Humana's overall security posture. You will also lead security assessments, vulnerability analysis, and product security reviews while helping develop innovative testing approaches and mitigation strategies for evolving risks. This is a high-impact opportunity to influence enterprise architecture, guide secure technology design, and help protect the business through strategic, modern security architecture. The Lead Security Architect engages with relevant EIP stakeholders to identify current and emerging security threats and works to design security architecture elements to mitigate threats as they emerge. Additionally, the role actively works to identify gaps within existing EIP reference architecture and designs updates to impacted security architecture elements to mitigate emerging threats. Performs and oversees efforts to conduct vulnerability testing, risk analysis, and security assessments of relevant enterprise / EIP infrastructure. Ensures EIP and Humana stakeholder security requirements are necessary to protect Humana's business functions and are adequately addressed in all aspects of enterprise architecture. The Lead Security Architect role is aligned to a segment (line of business) to proactively discover security issues during solution design and prevent vulnerabilities during development.

Role Description: We are seeking a Technical Implementation Engineer to join Commercial Cyber Operations. This person will perform hands-on systems work across varied customer environments. Compliance Leads will own NIST SP 800-171 interpretation and assessment readiness; this engineer will implement, test, and document the required technical controls with support from a senior engineer. Responsibilities: The listed responsibilities are not exhaustive and additional responsibilities may be assigned based on the evolving needs of the organization. We are seeking a dynamic individual who is able to adapt and take on new responsibilities as they arise. Configure and secure Microsoft 365, Entra ID, Active Directory, Google Workspace, Google Cloud Identity, and related business systems. Deploy and operate endpoint-management controls across multiple mobile device management and unified endpoint management platforms, including Jamf and Microsoft Intune. Implement identity, multifactor authentication, permissions, endpoint security, logging, vulnerability management, patching, backup, and recovery controls. Support Windows, macOS, iOS, Android, networks, firewalls, VPNs, DNS, and secure remote access. Troubleshoot technical issues with customer IT teams, service providers, vendors, and Defense Unicorns engineers. Test completed changes and produce accurate configuration records, diagrams, evidence, and runbooks. Complete assigned implementation work on schedule and raise risks or blockers early. Help turn repeatable work into checklists, scripts, and automation. Minimum Experience and Qualifications: Experience administering, securing, and troubleshooting business IT environments. Hands-on experience with Microsoft 365, Entra ID, Active Directory, and Google Workspace. Mobile device management or unified endpoint management experience across more than one platform, including practical experience with Jamf and Microsoft Intune. Experience supporting Windows and macOS endpoi

Role Description: We are seeking a Senior Technical Implementation Engineer to join Commercial Cyber Operations. This person will lead hands-on technical work across varied customer environments. Compliance Leads will own NIST SP 800-171 interpretation and assessment readiness; this engineer will design, implement, and validate the systems that support those requirements. Responsibilities: The listed responsibilities are not exhaustive and additional responsibilities may be assigned based on the evolving needs of the organization. We are seeking a dynamic individual who is able to adapt and take on new responsibilities as they arise. Assess unfamiliar customer environments and lead technical implementation plans with the Compliance Lead. Configure and secure Microsoft 365, GCC High, Azure, Entra ID, Active Directory, Google Workspace, Google Cloud Identity, and hybrid environments. Design, migrate, and operate endpoint-management programs across multiple mobile device management and unified endpoint management platforms, including Jamf and Microsoft Intune. Implement identity, multifactor authentication, least privilege, endpoint security, logging, vulnerability management, patching, backup, and recovery controls. Configure and troubleshoot Windows, macOS, iOS, Android, networks, firewalls, VPNs, segmentation, DNS, and secure remote access. Work directly with customer IT teams, service providers, and vendors to resolve complex technical issues. Validate completed work and produce clear configuration records, diagrams, evidence, and runbooks. Guide other implementation engineers and turn repeatable work into standards, scripts, and automation. Minimum Experience and Qualifications: Senior-level experience designing, administering, securing, and troubleshooting varied business IT environments. Strong hands-on experience with both Microsoft and Google environments, including Microsoft 365, Entra ID, Active Directory, and Google Workspace. Broad mobile device management

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . Responsibilities: Design and develop control‑plane and system services for a firewall platform, operating above the networking dataplane (OSI Layer 3+). Build and maintain management interfaces and APIs , including configuration frameworks, CLI, secure access (SSH), logging, and diagnostics. Implement security services such as authentication (SAML), guest access, SSL/TLS handling, and certificate lifecycle management . Develop embedded services for content filtering , including URL categorization, reputation, and rating systems, along with SNMP/telemetry support. Lead efforts in licensing systems , vulnerability remediation, and secure architecture in collaboration with cross‑functional teams. Requirements: 8+ years of experience in C/C++ systems development for embedded platforms, security appliances, or network operating systems. Strong hands‑on expertise with configuration frameworks, service APIs, CLI development, logging systems, and secure remote access (SSH) . Solid understanding of L3–L7 networking and security concepts , including SSL/TLS, authentication, identity federation, and PKI. Experience with certificate management, license enforcement fra

Channel & Partner Marketing Manager Location: United States — Remote Department: Marketing / Partnerships Eligibility: U.S. citizenship required due to the nature of RapidFort's work supporting U.S. Department of Defense (DoD) and other federal customer engagements. About RapidFort RapidFort is redefining software supply chain security. The cybersecurity industry has spent years getting better at finding vulnerabilities. RapidFort is focused on eliminating them . Our platform helps organizations automatically reduce vulnerabilities and attack surface across containerized and cloud-native environments. RapidFort combines automated container hardening, vulnerability remediation, runtime intelligence, and policy automation to help organizations deploy more secure software without requiring application code changes. We work with commercial enterprises, U.S. government organizations, and Department of Defense customers operating some of the world's most security-sensitive environments. As RapidFort continues to grow, our channel and partner ecosystem is becoming an increasingly important part of how we reach customers, generate pipeline, and scale our go-to-market strategy. The Opportunity RapidFort is looking for an experienced Channel & Partner Marketing Manager to help build the marketing engine behind our growing partner ecosystem. We are looking for someone who is already doing this work today . The ideal candidate has spent at least 5 years specifically in channel, partner, alliance, or ecosystem marketing , preferably within cybersecurity, cloud security, DevSecOps, infrastructure software, or another highly technical enterprise technology market. You should understand how cybersecurity companies generate business to, with, and through partners and know how to turn partner relationships into measurable pipeline. You'll work directly with RapidFort's Sales, Partnerships, Public Sector, and M