Own vulnerability management end-to-end: intake, triage, risk-based prioritization, remediation tracking, validation, SLAs, and reporting
Partner with Engineering/Product/QA to continually improve secure SDLC and CI/CD:O pipeline security, SAST/DAST/IAST, dependency and code scanning, secure code review practices
Continuously work with IT to further secure infrastructure: Endpoints, identity and access management, Conditional Access, hardening and configuration baselines
Coordinate and drive remediation for items identified by the SOC (alerts, incidents, vulnerabilities), including root-cause follow-up
Support patch management processes and verification in partnership with IT
Support security audits and continuous compliance efforts (ISO 27001, SOC 2 Type 2, SOC 1, ISAE 3402) including evidence collection and control improvement
Requirements
3+ years in cybersecurity engineering, security operations, DevSecOps, or security-focused IT (SaaS experience preferred)