Senior Security Engineer

Fullsteam

Senior Security Engineer managing vulnerability lifecycle and collaborating with teams at Fullsteam. Contributing to automation and driving effective security outcomes while working remotely.

Posted 6/23/2026full-timeRemote • 🇺🇸 United StatesSenior💰 $122,254 - $130,000 per yearWebsite

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Contribute to and help mature our vulnerability management program, ensuring identified risks are remediated according to SLAs across the enterprise and business units
Identify and report known vulnerabilities across infrastructure (cloud and on-prem), applications, software, AI systems, and external attack surface
Monitor external attack surface exposures and contribute to remediation prioritization
Produce vulnerability metrics, trending reports, and risk summaries for security leadership and business unit stakeholders
Support alignment of the VM program with industry regulations and standards (PCI-DSS, SOC2, NIST CSF, ISO 27001)
Collaborate with Security, IT, and BU Engineering teams to drive effective and measurable vulnerability and risk exposure outcomes
Contribute to risk management and governance functions (e.g., risk register, key metrics, vulnerability reports)
Develop and contribute to AI-assisted HITL (Human in the Loop) automation and workflows for Proactive Security initiatives
Collaborate with and learn alongside other Proactive Security team members

Requirements

What you’ll need

8+ years of Information Technology / Security experience with 2-4+ years of hands-on experience in vulnerability management, attack surface management, or related security functions
Working knowledge of security tools such as Wiz, Snyk, Qualys, Nessus, MS Defender, or similar platforms
Experience with vulnerability prioritization frameworks (CVSS, EPSS, risk-based scoring)
Experience with application security testing concepts and tools (SAST, DAST, IAST, Burp Suite, Postman, GitHub, etc.)
Basic scripting or programming experience in any language, or a strong desire to develop this skill
Ability to produce clear, actionable security reporting for both technical and non-technical audiences
Hands-on experience with AI-assisted security workflows (prompt engineering, agent development, MCP tooling)
Experience developing or contributing to process documentation
Ability to work independently in a fully remote environment while managing multiple concurrent priorities
Experience working in a multi-business-unit or enterprise environment
Genuine curiosity and desire to grow
CISSP or equivalent certification (GIAC, CISM, CRISC)
Bachelor’s degree in cybersecurity or equivalent work experience
Hands-on Defensive or Offensive security training or work experience
Project management knowledge, training and/or certifications

Benefits

Comp & perks

Inclusive workplace that values diversity of thought, experience, and background

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

vulnerability managementattack surface managementapplication security testingscriptingAI-assisted security workflowsrisk managementvulnerability prioritization frameworksprocess documentationsecurity reportingcloud security

Soft Skills

collaborationindependencecuriositycommunicationorganizational skillsproblem-solvingtime managementadaptabilityleadershipstakeholder engagement

Certifications

CISSPGIACCISMCRISC