greenhouse
Security Engineer - Vulnerability Management
endorlabs
Bengaluru, IND
Onsite
Discovered 2 weeks ago
Vulnerability managementVulnerability researchCVE, CWE, CVSS, EPSS, PURL, NVD, OSV, VEX, and SBOM standardsCI/CD automationSAST and SCA findings managementAI and LLM production pipelines
Free
Job Fit Check
Base Career helps you apply smarter for this job.
?%
Ready to ScanKey skills for this role
Vulnerability managementVulnerability researchCVE, CWE, CVSS, EPSS, PURL, NVD, OSV, VEX, and SBOM standards
Role Overview
Help advance Endor Labs' proprietary vulnerability database and security automation capabilities.
The role focuses on vulnerability validation, reachability analysis, exploit generation, and production-grade AI pipelines.
Key Skills for This Role
Vulnerability managementVulnerability researchCVE, CWE, CVSS, EPSS, PURL, NVD, OSV, VEX, and SBOM standardsCI/CD automationSAST and SCA findings managementAI and LLM production pipelines
Full Job Posting
Role Overview
Help advance Endor Labs' proprietary vulnerability database and security automation capabilities.
The role focuses on vulnerability validation, reachability analysis, exploit generation, and production-grade AI pipelines.
What You Will Do
- Monitor and manage pipelines that triage, enrich, and prioritize vulnerabilities at scale.
- Work with CVE, CWE, CVSS, EPSS, PURL, NVD, OSV, GHSA, and VEX standards and data sources.
- Improve the accuracy, coverage, and timeliness of vulnerability data.
- Work with 0-day researchers to turn manual research workflows into repeatable production systems.
- Investigate high-impact vulnerabilities and the broader vulnerability landscape.
- Write public-facing blog posts, technical write-ups, advisories, and security reports.
- Communicate findings to technical and non-technical audiences.
- Feed findings into detection and analysis pipelines and improve automated coverage over time.
Required Qualifications
- Bachelor's degree in engineering or a related field.
- At least 3 years of hands-on experience in vulnerability research, vulnerability management, product security, or application security.
- Extensive knowledge of software vulnerabilities, triage, prioritization, and standards including CVE, CWE, CVSS, EPSS, PURLs, NVD, OSV, VEX, and SBOM formats.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
