Senior Vulnerability Management Engineer

SoFi Technologies
Seattle, San Francisco
Full timeUSD 124,800 - 234,000 annuallyFunction: Solutions Engineering & Sales EngineeringExperience: 4+ yearsEducation: bachelorsSkills: ["Independent ownership","Cross-team collaboration","Technical initiative management"]

Independently identify, assess, and remediate vulnerabilities across applications, infrastructure, containers, Kubernetes environments, and third-party dependencies. Investigate direct vs. transitive vulnerable packages, recommend safe upgrades or compensating controls, and partner with engineering teams to validate fixes. Own and improve vulnerability-management tooling (repositories, scheduled jobs, APIs, reporting) and build dashboards/automations that track risk, remediation progress, SLA performance, and program effectiveness using approved AI tools.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
SoFi Technologies
SoFi Technologies
2 days ago

Senior Vulnerability Management Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 12 hours agoStatus: Live

Job Summary

Independently identify, assess, and remediate vulnerabilities across applications, infrastructure, containers, Kubernetes environments, and third-party dependencies. Investigate direct vs. transitive vulnerable packages, recommend safe upgrades or compensating controls, and partner with engineering teams to validate fixes. Own and improve vulnerability-management tooling (repositories, scheduled jobs, APIs, reporting) and build dashboards/automations that track risk, remediation progress, SLA performance, and program effectiveness using approved AI tools.
Location: Seattle, San Francisco
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Mid level

Key Responsibilities

  • •Perform vulnerability assessments across applications, operating systems, containers, Kubernetes clusters, and third-party dependencies.
  • •Investigate vulnerable dependencies and determine direct vs. transitive origins.
  • •Recommend safe dependency upgrades, configuration changes, patches, or compensating controls, and validate remediation.
  • •Own and maintain the source-code repositories and reporting applications for internal vulnerability-management tooling.
  • •Integrate security tools with ticketing systems and reporting platforms via APIs/webhooks; develop dashboards and lead remediation initiatives.

Pay and Benefits

Salary: USD 124,800 - 234,000 annually

Key Requirements

  • •Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or equivalent practical experience.
  • •4+ years of experience in information security, vulnerability management, application security, security engineering, or a related discipline.
  • •Strong understanding of CVE, CVSS, CWE, CISA KEV, EPSS, OWASP, and risk-based vulnerability prioritization.
  • •Experience investigating vulnerable dependencies using build files, dependency trees, lock files, container images, and software-composition-analysis tools.
  • •Hands-on experience with vulnerability-management platforms (e.g., Qualys) and scanning tools (SAST, DAST, SCA, container-security, or infrastructure scanning).
Experience:4+ yearsInformation securityVulnerability managementApplication securitySecurity engineering
Education:Bachelor's
Skills:Independent ownershipCross-team collaborationTechnical initiative management
Certifications:Hack The BoxOffensive Security
Languages:English
Tech Stack:PythonJavaGoBashCVECVSSCWECISA KEVEPSSOWASPQualysSASTDASTSCAKubernetesHelmCI/CDLoggingMonitoringSecrets management

Company Brief

SoFi Technologies
Provides digital financial services including lending, banking, investing, and credit products through a consumer-focused online platform. SoFi serves individuals looking to manage money, borrow, save, invest, and protect their finances in one place.
Industry: Neobanking
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: San Francisco, United States
Founded: 2011
WebsiteLinkedIn