Staff Security Engineer – Vulnerability Operations at 6sense

6sense

Bengaluru, Karnataka, India·1w ago

LeadFull-timePythonAWSCI/CDGitAI

Salary Range

$30,600 - $41,400 /year

Estimated

This salary is estimated based on similar roles. The actual salary may vary.

About the Role

You will lead the end-to-end vulnerability management program across application, infrastructure, and cloud security domains. This role involves driving detection, triage, remediation, and reporting workflows while partnering with engineering, product, and GRC teams to scale secure-by-design practices.

Key Responsibilities

→Lead and enhance the end-to-end vulnerability lifecycle—detection, triage, remediation, and reporting—across cloud, infrastructure, and application layers. Design and execute quarterly OKRs.
→Build and maintain automation pipelines for vulnerability detection and response using tools like Wiz, GitHub, Ox, Invicti, and HackerOne.
→Develop and maintain critical security metrics and dashboards to drive security roadmaps and enforce risk-based decisions.
→Partner with Engineering, GRC, IT, and Product to embed security into SDLC and CI/CD pipelines.
→Implement major iterations of VulnOps programs in alignment with industry trends and regulatory demands.
→Lead off-hours incident response or urgent escalations related to critical vulnerabilities and patches.
→Coach junior engineers and influence security culture across the organization.

Requirements

✓8+ years in security engineering, with deep experience in vulnerability management.
✓Strong background in AppSec, InfraSec, and CloudSec (AWS preferred).
✓Hands-on experience with SAST, DAST, Bug Bounty, container scanning, and IaC security.
✓Familiarity with frameworks like NIST, MITRE ATT&CK, and OWASP.
✓Strong scripting and automation skills (Python, Bash, etc.).
✓Excellent program management, communication, and stakeholder management skills.