Vulnerability & Exposure Management Engineer

Datavant

Security Engineer focusing on vulnerabilities and exposure management for healthcare data solutions at Datavant. Building and automating workflows to reduce exploit risk across various environments.

Posted 7/22/2026full-timeRemote • 🇺🇸 United StatesMid-LevelSenior💰 $152,000 - $185,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in vulnerability management and application security, with a strong focus on automation, risk assessment, and compliance frameworks. Proficient in collaborating with engineering teams to enhance security processes and improve vulnerability visibility.

Highest-signal resume keywords

Vulnerability ManagementApplication SecurityAutomation Using Python or GoCloud Security in AWS or AzureCompliance Frameworks (NIST, CIS, FedRAMP)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability AssessmentRisk PrioritizationTechnical Workflow AutomationExploitability AnalysisSecurity Controls Knowledge

Soft Skills

Clear CommunicationCollaboration with Engineering TeamsAdaptability in Fast-Paced Environments

Tools & Technologies

Commercial Security ToolingSASTSCACloud Security Platforms

Industry Keywords

Vulnerability Management ProgramCI/CDTechnical Evidence ValidationRemediation EffortsSecurity Compliance

Tech Stack

Tools & technologies

AWSAzureCloudGoPython

About the role

Key responsibilities & impact

Contribute to the design, implementation, and operation of Datavant’s vulnerability and exposure management capabilities, with a focus on reducing real exploit risk.
Build and enhance automation and workflows that ingest, normalize, and prioritize vulnerability signals across multiple sources.
Develop and improve engineer-facing dashboards and integrations that help teams understand and act on vulnerability risk.
Work with product and engineering teams to assess vulnerability findings, explain exploitability and impact, and support practical remediation or mitigation approaches.
Help embed vulnerability signals into existing engineering workflows (CI/CD, PRs, backlogs) to improve visibility and adoption.
Support validation of remediation efforts to ensure exposure is meaningfully reduced.
Assist in translating compliance and control requirements into scalable technical implementations.
Support FedRAMP and other assessments by validating technical evidence and remediation outcomes.
Execute technical projects that improve vulnerability visibility, prioritization, and risk reduction.
Contribute to improving processes, tooling, and automation within the vulnerability management program.

Requirements

What you’ll need

Solid technical experience in vulnerability management and application security, with hands-on exposure to assessing and prioritizing vulnerability findings.
Demonstrated ability to build or automate technical workflows using scripting or programming languages such as Python or Go.
Experience working with application, cloud, or container security in AWS and/or Azure environments.
Working knowledge of security controls and compliance frameworks (e.g., NIST, CIS, FedRAMP), with the ability to apply requirements in practical engineering contexts.
Ability to reason about exploitability, exposure, and impact beyond severity scores.
Experience collaborating with engineering teams to support remediation efforts.
Clear communication skills and ability to explain technical risk to varied audiences.
Ability to operate effectively in fast-paced environments with evolving priorities.
Foundational understanding of how vulnerability management fits within broader security and engineering functions.
Experience with commercial security tooling (e.g., SAST, SCA, cloud security platforms) and ability to interpret tool outputs critically.

Benefits

Comp & perks

Health insurance
401(k) matching
Flexible work hours
Paid time off
Remote work options