Senior/Principal Vulnerability Management Engineer

As a Senior/Principal Vulnerability Management Engineer, you will be reporting to the Senior Director of Product and Application Security . You will partner across the company and within Information Security to help Roblox build a world class vulnerability management program. You will perform vulnerability assessments and remediation capabilities at scale and support the leadership team in growing and expanding this critical security function within Roblox. You will collaborate with various security, engineering, and risk teams to understand technical constraints, identify scalable solutions to reduce risk and support automated reporting for C-level consumption.

You will:

• Architect a vulnerability management platform that is extensible company wide. This will include in-depth communication and collaboration strategies with partner teams and organizations as well as the day to day operational support for scanning, reporting and remediation.
• Work across multiple technologies and major cloud platforms to perform vulnerability impact assessment, root causes analysis, and to identify strategic opportunities for security posture improvement
• Develop, deploy, and maintain services that detect vulnerabilities and drive remediation.
• Use custom and third-party tools to detect, report, and remediate vulnerabilities
• Partner with internal stakeholders to analyze metrics, identify false positives, and support partner organizations in their remediation efforts.

You have:

• 6+ years experience building, overseeing and/or operating a vulnerability management program.
• Experience with scanning tools , troubleshooting false-positives/false-negatives, and an in-depth understanding of host/service crashes.
• Configured and managed vulnerability scanning tools such as Qualys, Tenable, Snyk, Wiz, or Prisma Cloud for running efficient vulnerability scanning.
• Defined and implemented remediation programs and are familiar with patch management best practices across multiple operating systems at scale.
• Experience recommending and building solutions that address the greatest security gaps and incrementally pull the business forward.
• Balance between multiple options with varying degrees of risk acceptance.
• Experience with orchestration platforms and container runtimes, infrastructure as code and cloud-native or multi-cloud environments.
• Experience in driving efficiencies through automation, orchestration and partnerships with internal stakeholders.
• Ability to work independently and collaboratively, and communicate effectively in a fast-paced, distributed organization

You are:

• Creative: When presented with a challenge, you look for new ways to solve hard problems fast.
• Organized: You can distill complex technical information into plain business language and deliver clear and concise strategy recommendations.
• A Leader: You have experience collaborating to set a team vision that solves company-wide problems, and you work across organizations to help execute it.