HHiring Reality
← SoFi

Vulnerability Management Engineer

SoFi
Location
CA - San Francisco
Posted
16 days ago
Department
Information Security
What they actually want (must-haves)
  • Bachelor’s Degree in Computer Science, Information Systems, or equivalent work-related experience
  • Strong knowledge of industry standards regarding vulnerability management including Common Vulnerabilities and Exposures (CVE), Common Vulnerability Scoring System (CVSS), OWASP, etc.
  • Experience with different types of vulnerability assessment tools or related experience in vulnerability detection DAST/SAST tools
  • Outstanding communication and interpersonal skills
  • Ability to demonstrate knowledge with prioritizing remediation activities with operational teams through risk ratings of vulnerabilities and assets
  • Experience judging the vulnerability priority based on risk and impact
Nice to have
  • 2+ years of experience in an information technology/security role
  • 2+ years of experience with cloud technologies
  • Familiarity with AWS and at-scale services
  • Experience with micro-service architecture
  • Knowledge of CI/CD, application development and testing tools
What the job really is

As a Vulnerability Management Engineer, you will support the identification, assessment, prioritization, and remediation of vulnerabilities in applications and infrastructure. Your role includes conducting vulnerability assessments, engaging with engineering teams for remediation, and maintaining internal vulnerability management tools. You will also contribute to security reviews and compliance monitoring while developing processes for team efficiency.

Things to weigh
  • No specific salary figures provided, only a base pay range
  • Vague mention of comprehensive benefits without specifics
  • Role may require collaboration with various stakeholders which could impact workload and priorities
Job score2.6/5
Benefits1/5
Freshness4/5
Career value4/5
Role clarity4/5
Pay transparency0/5

Applying to SoFi?

See how your résumé matches this role — and tailor it from what actually gets interviews.