Vulnerability Management Engineer (Cybersecurity)

Location: Remote in Colombia, Costa Rica, or Mexico

Company

hirify.global provides open cloud object storage for businesses, developers, IT professionals, and individuals.

What you will do

• Drive risk-based vulnerability and exposure management across infrastructure, applications, cloud services, endpoints, and software dependencies.
• Correlate vulnerability and threat intelligence with asset inventory, software and system configuration, application testing, network exposure, ownership, and business criticality.
• Assess exploitability and reachability using exploit prediction, known-exploitation intelligence, adversary activity, and environmental context.
• Determine whether significant exposures require incident response or remediation under established operational objectives, partnering with Red Team to validate practical exploitability.
• Identify compensating controls such as configuration changes, access restrictions, segmentation, and filtering when immediate patching is impractical.
• Automate vulnerability ingestion, analysis, prioritization, remediation tracking, mitigation, and verification, including AI-assisted workflows with independent validation.

Requirements

• Experience with enterprise vulnerability or exposure management.
• Strong understanding of infrastructure, applications, cloud, containers, networking, and software dependencies.
• Experience interpreting vulnerability intelligence and assessing practical exploitability.
• Knowledge of risk-based prioritization techniques, including CVSS, exploit prediction, known-exploitation intelligence, and environmental context.
• Experience correlating vulnerability, asset, configuration, SAST, DAST, SCA, endpoint, or related security data.
• Experience with scripting, automation, or data analysis.
• Strong understanding of OWASP Top 10, MITRE ATT&CK, MITRE D3FEND, and STRIDE.
• Familiarity with OWASP Top 10 for LLM, OWASP Top 10 for Agentic Applications, MITRE ATLAS, and MAESTRO.

Nice to have

• Familiarity with continuous exposure management, attack-path analysis, AI-assisted analysis, or automated mitigation.

Culture & Benefits

• Learning, development, and growth are emphasized.
• Inclusive workplace focused on diversity, equity, and belonging.
• Equal Opportunity Employer.