HHiring Reality
← SoFi

Senior Vulnerability Management Engineer

SoFi
Location
WA - Seattle; CA - San Francisco
Posted
16 days ago
Department
Information Security
What they actually want (must-haves)
  • Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or equivalent practical experience
  • 4+ years of experience in information security, vulnerability management, application security, security engineering, or a related discipline
  • Strong understanding of CVE, CVSS, CWE, CISA KEV, EPSS, OWASP, and risk-based vulnerability prioritization
  • Experience investigating vulnerable dependencies using build files, dependency trees, lock files, container images, and software-composition-analysis tools
  • Ability to determine where a vulnerable package originates and recommend a safe, compatible remediation
  • Hands-on experience operating vulnerability-management platforms such as Qualys or similar tools
Nice to have
  • Experience with cloud platforms and cloud-native services
  • Experience with microservice architectures and Kubernetes-based applications
  • Experience developing vulnerability-management automation and self-service security tools
  • Knowledge of Java dependency-management systems such as Gradle or Maven, including transitive dependency analysis
  • Ability to collaborate with engineering, infrastructure, business, compliance, and external vendor teams
What the job really is

As a Senior Vulnerability Management Engineer, you will identify, assess, and prioritize vulnerabilities across various environments, including applications and infrastructure. You will drive remediation efforts, enhance internal vulnerability management tools, and collaborate with engineering teams to implement fixes. The role also involves using AI tools to support development and security automation, as well as developing dashboards and reports to communicate vulnerability risks and remediation progress.

Things to weigh
  • No specific salary figures provided, only that it will be determined based on experience and location.
  • The role involves using AI tools, which may indicate a modern approach to vulnerability management but could also imply reliance on automation.
  • The job requires collaboration with multiple teams, which may involve navigating complex organizational dynamics.
Job score2.8/5
Benefits1/5
Freshness4/5
Career value4/5
Role clarity5/5
Pay transparency0/5

Applying to SoFi?

See how your résumé matches this role — and tailor it from what actually gets interviews.

Calculate resume scoreGenerate resume to apply
Job Link →