Vulnerability Management Engineer

Backblaze

. Drive risk-based vulnerability and exposure management across infrastructure, applications, cloud services, endpoints, and software dependencies .

Posted 10/19/2026full-timeRemote • Colombia, Costa Rica, MexicoMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in risk-based vulnerability management, leveraging threat intelligence and automation to prioritize and remediate vulnerabilities across diverse environments. Proficient in assessing exploitability and implementing compensating controls while collaborating with security teams to enhance overall security posture.

Highest-signal resume keywords

Enterprise Vulnerability ManagementRisk-Based Prioritization TechniquesThreat Intelligence CorrelationScripting And AutomationUnderstanding Of OWASP Top 10

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ManagementExploit PredictionRisk AssessmentData AnalysisConfiguration ManagementSASTDASTSCAAutomationIncident Response

Tools & Technologies

AI-Assisted WorkflowsRed Team CollaborationContinuous Exposure ManagementAutomated MitigationAttack-Path Analysis

Industry Keywords

MITRE ATT&CKMITRE D3FENDCVSSOWASP Top 10Environmental ContextKnown-Exploitation IntelligenceAdversary ActivityExposure ManagementEndpoint SecurityCloud Security

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Drive risk-based vulnerability and exposure management across infrastructure, applications, cloud services, endpoints, and software dependencies
Correlate threat intelligence and vulnerability findings with asset inventory, software and system configuration, application testing, network exposure, ownership, and business criticality
Assess exploitability and reachability rather than relying on vulnerability severity alone
Incorporate exploit prediction, known exploitation, open-source threat intelligence, adversary activity, and environmental context into prioritization
Determine whether exposure requires immediate incident response or remediation under established operational objectives
Use AI-assisted workflows to ingest and correlate vulnerability intelligence against the organization's technology configuration while independently validating conclusions
Partner with Red Team to validate practical exploitability of significant vulnerabilities
Identify compensating controls such as configuration changes, access restrictions, segmentation, or filtering when immediate patching is impractical
Automate vulnerability ingestion, analysis, prioritization, remediation tracking, mitigation, and verification where appropriate

Requirements

What you’ll need

Experience with enterprise vulnerability or exposure management
Strong understanding of infrastructure, applications, cloud, containers, networking, and software dependencies
Experience interpreting vulnerability intelligence and assessing practical exploitability
Knowledge of risk-based prioritization techniques including CVSS, exploit prediction, known-exploitation intelligence, and environmental context
Experience correlating vulnerability, asset, configuration, SAST, DAST, SCA, endpoint, or related security data
Experience with scripting, automation, or data analysis
Strong understanding of OWASP Top 10, MITRE ATT&CK, MITRE D3FEND, and STRIDE
Familiarity with OWASP Top 10 for LLM, OWASP Top 10 for Agentic Applications, MITRE ATLAS and MAESTRO
Familiarity with continuous exposure management, attack-path analysis, AI-assisted analysis, or automated mitigation is preferred

Benefits

Comp & perks

Equal Opportunity Employer commitment
Diversity, equity, and inclusion values
Inclusive workplace where employees can express their true selves and do their best work