Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 6 hours ago

Senior Engineer, Exposure & Vulnerability Management

Recursion9 open roles

Pay
$134,200 – $180,600 a year
Where
US
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Engineer, Exposure & Vulnerability ManagementRecursion · US

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Recursion's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.7% of postings close within 7 days. Measured by our own scanner across the market. Recursion postings stay open a median of 38 days.

Share of postings closed within
  1. 2.3%1 day
  2. 4.8%3 days
  3. 13.7%7 days
  4. 22.1%14 days
  5. 37.6%30 days
  6. 59.1%60 days
This job: posted 6 hours ago

Recursion median: 38 days open

The posting

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Engineer, Exposure & Vulnerability Management based in the United States.

The Senior Engineer, Exposure & Vulnerability Management will lead the evolution of enterprise security from periodic vulnerability scanning to continuous, risk-driven exposure management. In this role, you will design intelligent, automated systems that identify, prioritize, remediate, and verify security exposures across cloud, on-premise infrastructure, applications, and corporate environments. You will leverage AI agents, automation, and real-time threat intelligence to distinguish genuinely exploitable vulnerabilities from lower-risk findings. Working closely with Engineering, IT, and Information Security teams, you will embed secure-by-default practices into development and operational workflows. You will also strengthen governance through approval controls, audit trails, measurable security outcomes, and compliance-focused processes. This is an opportunity to shape a proactive security strategy while applying advanced automation to protect complex technology environments.

Accountabilities

  • Design and deploy AI-powered multi-agent systems that manage exposures from discovery through verified remediation.
  • Build automated workflows that analyze vulnerabilities externally, map internal dependencies, generate patches or Infrastructure-as-Code updates, and validate remediation outcomes.
  • Implement appropriate approval gates, audit trails, and rollback mechanisms to ensure automated changes receive risk-based oversight.
  • Develop risk-based prioritization engines that move beyond static CVSS scores by incorporating real-time reachability, attack-path context, business criticality, and active exploit intelligence.
  • Implement automated verification to distinguish theoretical vulnerabilities from conditions that are actively exploitable, reducing alert noise and helping engineering teams focus on critical risks.
  • Drive the Continuous Threat Exposure Management (CTEM) strategy, transitioning from periodic scans to continuous security monitoring across products, platforms, cloud and on-premise infrastructure, and corporate applications.
  • Assess existing exposure and vulnerability management capabilities and redesign the program to support business objectives and a broader zero-trust security approach.
  • Architect cloud-native discovery, asset inventory, and remediation workflows, integrating them with ticketing systems, CI/CD pipelines, and configuration management tools.
  • Partner with Engineering and IT to embed secure-by-default practices into application development, deployment, and patching processes.
  • Establish risk-based remediation timelines that reflect the severity and business impact of each exposure.
  • Define and monitor security KPIs, KCIs, and KRIs, including mean time to remediate, exploitable exposure backlog, and critical asset coverage.
  • Collaborate with relevant teams to design and maintain vulnerability and exposure controls that support regulatory and compliance requirements, including SOC 2.
  • Continuously improve security processes through automation, measurable performance indicators, and cross-functional collaboration.
  • Bachelor's or Master's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
  • At least 7 years of experience in vulnerability management, exposure management, or related information security domains.
  • Demonstrated experience leading large-scale security programs from strategy through execution in cloud-first and hybrid environments.
  • Deep understanding of security principles and proven ability to translate vulnerability data into prioritized, assigned, and verified remediation actions.
  • Hands-on experience building or deploying AI/LLM-based agents or multi-agent systems for security or engineering workflows, including orchestration, tool usage, and evaluation.
  • Working knowledge of approval workflows, audit logging, and rollback controls for automated remediation, including an understanding of the risks associated with agent-driven changes.
  • Proficiency in one or more programming languages, such as Python, Go, or Java, with strong scripting and automation capabilities.
  • Advanced experience with vulnerability and exposure management platforms such as Tenable, Qualys, Rapid7, or equivalent solutions.
  • Familiarity with CTEM, attack surface management, and attack-path analysis tools and methodologies.
  • Strong command of risk-based vulnerability prioritization frameworks and intelligence sources, including CVSS, EPSS, CISA KEV, reachability analysis, and threat intelligence feeds.
  • Experience with cloud platforms such as AWS, Azure, or GCP.
  • Knowledge of container and Kubernetes security, as well as Infrastructure-as-Code tools such as Terraform and CloudFormation.
  • Experience with CI/CD pipelines, SCA/SAST tools, and software supply chain security practices, including SBOMs and dependency mapping.
  • Strong understanding of operating systems, including UNIX/Linux, macOS, and Windows, as well as networking and database management systems.
  • Experience with security risk management and aligning technical solutions with organizational risk tolerance and compliance requirements, such as SOC 2 or GxP.
  • Strong analytical, problem-solving, and communication skills, with the ability to collaborate across technical teams and translate security risks into actionable priorities.
  • Relevant security certifications such as CISSP, OSCP, or GWAPT.
  • Experience designing and implementing continuous exposure management programs in complex enterprise environments.
  • Familiarity with regulated technology or life sciences environments and their security and compliance requirements.
  • Base salary: $134,200–$180,600 USD annually, depending on skills, experience, and qualifications.
  • Eligibility for an annual performance-based bonus.
  • Equity compensation.
  • Comprehensive healthcare benefits.
  • Flexible Spending Account (FSA).
  • Flexible work arrangements.
  • Flexible time off.
  • Parental leave.
  • Opportunity to work on advanced AI-driven security technologies and enterprise-scale automation initiatives.
  • Collaboration with a growing Information Security team and cross-functional engineering partners.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Recursion's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Recursion's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Recursion's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.