Security Engineer, Vulnerability & Attack Surface Management

About the role

The Security Engineer, Vulnerability & Attack Surface Management will drive the full vulnerability lifecycle, turning a reactive process into a proactive, intelligence‑driven capability. You will embed AI across scanning, triage and remediation to keep high‑risk vulnerabilities from being exploited in IT, cloud and OT‑adjacent environments.

Key responsibilities

• Design, operate and continuously improve AI‑augmented vulnerability scanning pipelines across on‑premise, cloud and hybrid environments.
• Develop and tune AI‑driven prioritization models that combine CVSS, EPSS, CISA KEV, threat intelligence and asset criticality.
• Build automated remediation workflows, including AI‑generated ticket creation, SLA monitoring and predictive breach alerts.
• Maintain accurate asset inventories, integrate with CMDBs, and use AI‑assisted discovery to identify shadow‑IT and coverage gaps.
• Support attack surface management by mapping external exposure trends and modelling risk‑reduction scenarios.

Required profile

• Proven experience in vulnerability management and attack surface analysis.
• Strong understanding of AI/ML concepts applied to security data.
• Ability to work with cross‑functional teams and translate technical findings into clear risk narratives.

Required skills

• Tenable Nessus
• Qualys VMDR
• Rapid7 InsightVM
• Microsoft Defender Vulnerability Management
• Cortex Xpanse
• Microsoft Defender EASM
• CVSS v3 / v4
• EPSS
• CISA KEV

What we offer

• Competitive base salary
• Comprehensive benefits and wellness support
• Flexible work model – hybrid, remote or in‑office
• Real growth opportunities and visibility with leadership
• Inclusive, respectful culture that blends U.S. innovation with Colombian heart