Paranoids Senior Vulnerability Management Engineer (AI)

Location: Ireland; hybrid role. hirify.global may require attendance at on-site work sessions, team-building, or other in-person events.

Salary: €72,600–€121,000 per year, depending on location, skills, and experience. Discretionary annual bonus or commissions may also apply.

Company

hirify.global's information security team, The Paranoids, protects hirify.global users, brands, and partners across large-scale internet and advertising technology environments.

What you will do

• Lead the coordination, assessment, communication, prioritization, and remediation of high-severity and critical vulnerabilities.
• Analyze vulnerability data with Databricks, threat intelligence, CISA KEV, EPSS, SBOM data, and dashboards to quantify risk and report trends.
• Oversee vulnerability scanning platforms, scanner configuration, vendor relationships, and scanning across cloud, host, application, container, IaC, and code environments.
• Design and optimize AI-driven and agentic workflows for finding enrichment, prioritization, automated pull requests, ticketing, and remediation tracking.
• Track software supply chain exposure, including dependency confusion, malicious packages, and SBOM ingestion across host, container, cloud, and on-premises environments.
• Provide remediation guidance to product teams, developers, and administrators; maintain runbooks, lead emergency response, and participate in on-call support.

Requirements

• Bachelor's degree in Computer Science, Engineering, Information Security, or a technical equivalent through practical experience.
• 7+ years of experience in information security, vulnerability management, or security engineering.
• Strong knowledge of application, network, and operating-system vulnerabilities, patching, attack patterns, Linux, Windows, and macOS.
• Experience leading critical vulnerability remediation and stakeholder coordination during high-pressure incidents.
• Experience with CVSS, EPSS, CISA KEV, Tenable, Nexpose, Qualys, AWS Inspector, GCP SCC, and GitHub Advanced Security.
• Strong knowledge of AWS, GCP, Kubernetes, AWS EKS, Docker, container scanning, and IaC security.
• Deep understanding of supply chain risks, dependency confusion, SBOM ingestion, and automated scanning and remediation across AWS, GCP, and on-premises environments.
• Proficiency with AI tools and agentic frameworks, Databricks or similar data-analysis platforms, and Python or Go for automation, APIs, and testable code.
• Experience with SDLC, host-based security, networking, systems administration, information security practices, web protocols, operating systems, and networking technologies; ability to work independently with urgency in a fast-paced environment.

Nice to have

• CISSP, CISM, or relevant cloud security certification.
• Experience independently leading projects, creating Databricks log-analysis dashboards, integrating SDLC security reviews, automating pull-request gates, managing patches, and eliminating vulnerability classes.
• Experience collaborating with software engineers, platform developers, cross-functional teams, and senior leadership.

Culture & Benefits

• Flexible-hybrid work model with limited regular in-person attendance for most roles.
• Healthcare, pension, and a flexible benefits package.
• On-call rotation and after-hours support are required for critical vulnerability handling.
• Equal-opportunity and accessible workplace with reasonable accommodation support during hiring and employment.