Jobs → Customer Support → Vulnerability Management Lead

About the Role We are looking for a Vulnerability Management Lead to join our team. This role focuses on secure code remediation and managing vulnerabilities across various platforms. Key Responsibilities • Lead remediation of Dependabot, CodeQL, Night Agent and LUMI findings • Fix vulnerable dependencies and code-level security issues • Ensure remediation complies with secure coding and OWASP Top 10 principles • Define reference implementations and PR standards • Guide 5 EL3 code engineers across onshore and overseas teams • Review pull requests and approve appropriate remediation approaches • Manage Java dependencies through Maven/Gradle, JavaScript dependencies through npm, and Python through pip • Handle dependency upgrades and software supply-chain vulnerabilities • Work with SCA/SBOM concepts • Work on findings generated through Dependabot, CodeQL, SonarQube and JFrog Xray • Coordinate fixes, automated/unit testing and CI/CD validation • Coordinate with application owners to get changes accepted and merged • Track fixes until security rescanning confirms closure Requirements • 6–8 years software engineering experience • Strong Java development background • JavaScript/TypeScript and/or Python • Maven/Gradle dependency management • GitHub PR and branching knowledge • CI/CD and automated testing experience • OWASP/security remediation experience