Senior Security Engineer, Vulnerability Management

1Password
United States, Canada
Workplace: RemoteFull timeFunction: CybersecuritySkills: ["Communication","Judgment under pressure","Adaptability","Resilience","Systems thinking"]

Own and mature the end-to-end product security lifecycle, leading incident response from discovery through triage, remediation, and coordinated disclosure. Guide PSIRT capabilities with incident classification frameworks, severity models, and escalation paths, while coordinating cross-functional response across Engineering, Legal, Communications, and Customer Success. Build and maintain incident response tooling and automation, contribute to customer security advisories and CVE disclosures, and translate post-incident reviews into systemic improvements.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
1Password
1Password
1 week ago

Senior Security Engineer, Vulnerability Management

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 4 hours agoStatus: Live
Reposted: similar role first listed 3 months ago

Job Summary

Own and mature the end-to-end product security lifecycle, leading incident response from discovery through triage, remediation, and coordinated disclosure. Guide PSIRT capabilities with incident classification frameworks, severity models, and escalation paths, while coordinating cross-functional response across Engineering, Legal, Communications, and Customer Success. Build and maintain incident response tooling and automation, contribute to customer security advisories and CVE disclosures, and translate post-incident reviews into systemic improvements.
Location: United States, Canada
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Lead end-to-end response to product security incidents from discovery and triage through remediation and disclosure.
  • •Own and evolve PSIRT capabilities, including incident classification frameworks, severity models, escalation paths, and response playbooks.
  • •Drive coordinated vulnerability disclosure (CVD) by partnering with the bug bounty program and external security researchers to manage responsible timelines and communications.
  • •Serve as primary incident coordinator across Product Security, Engineering, Legal, Communications, and Customer Success, and lead post-incident reviews (PIRs).
  • •Develop incident response tooling and automation, contribute to customer security advisories and CVE disclosures, and evaluate AI-powered workflows for detection and response.

Pay and Benefits

Equity and Bonus:Equity
Perks:Health InsuranceDental401kEquityPaid LeaveRsusRemote Work

Key Requirements

  • •5+ years of career experience in IT or Engineering with a security focus.
  • •Hands-on experience leading or participating in security incident response in a product or SaaS context.
  • •Experience with coordinated vulnerability disclosure (CVD) and managing relationships with external security researchers.
  • •Strong judgment under pressure for time-sensitive decisions with incomplete information.
  • •Comfort reading and writing code to support forensic analysis, automation, and tooling.
Experience:SaaSProduct securityIncident responseBug bountyCoordinated vulnerability disclosure
Skills:CommunicationJudgment under pressureAdaptabilityResilienceSystems thinking
Certifications:GCIHGCFEGCFAPNPT
Tech Stack:AILLMAutomationToolingCVSSEPSSSBOMsSOC 2ISO 27001

Company Brief

1Password
1Password (AgileBits Inc.) provides a password manager and identity-security platform for individuals and businesses, offering secure credential storage, sharing, and access management across devices and AI agents.
Industry: Cybersecurity
Company Size: Enterprise (1,001+ employees)
Revenue: USD 250M to 500M
Growth: Scaleup
Valuation: Unicorn (USD 1B+)
Funding: Series C
Headquarters: Toronto, Canada
Founded: 2005
Glassdoor
Glassdoor: 3.3
WebsiteLinkedInGlassdoor