91 vulnerability engineer jobs at 65 companies in New York

3w
Save
Mark Applied
Hide
Vulnerability Management Engineer
New York City, New York, United States
OnsiteFull Time
Capgemini
CapgeminiEuronext Paris: CAP: Provides global IT consulting and digital transformation services.
Engineering leader to engage executives, lead engineering teams, drive delivery and code, enable AI/GenAI adoption, SRE transformation, SDLC modernization, and provide hands-on technical guidance.
OpenAI, Copilot, Kubernetes, Azure, GCP, AWS, CI/CD
1mo
Save
Mark Applied
Hide
Engineer Vulnerability Remediation
Long Island City, New York, United States
$73k-$98k/yr OnsiteFull Time
JetBlue
JetBlueNASDAQ: JBLU: Low-cost airline providing air travel and integrated vacation services.
3+ YOE3+ years server vulnerability remediation/patch management experience; experience with enterprise patch and vulnerability tools, scripting (PowerShell, Python, Bash, Ansible), Windows Server and Linux; available for after-hours maintenance and occasional travel; must be authorized to work in the US.
Microsoft SCCM, Microsoft MECM, Microsoft WSUS, Tanium, BigFix, Ivanti, Qualys, Rapid7, Nucleus, Tenable, PowerShell, Python, Bash, Ansible, Windows Server, Linux
2mo
Save
Mark Applied
Hide
Sr Vulnerability Management Engineer
Minnesota or Oklahoma or Maine or Massachusetts or Wisconsin or South Dakota or Iowa or Utah or Oregon or Montana or Hawaii or New Jersey or Delaware or New York or Nevada or Ohio or Washington or North Carolina or Missouri or New Hampshire or California or Alaska or Alabama or Rhode Island or Indiana or Georgia or South Carolina or Texas or Kentucky or Virginia or Kansas or Arizona or North Dakota or Michigan or Vermont or Nebraska or Wyoming or Connecticut or Colorado or Mississippi or Idaho or New Mexico or Tennessee or Pennsylvania or West Virginia or Arkansas or Florida or Maryland or Louisiana or Illinois or District of Columbia or New York City
$143k-$197k/yr RemoteFull Time
Solventum
SolventumNYSE: SOLV: Provides medical technology and health information software solutions.
7+ YOEBachelor's degree and 7+ years vulnerability management experience; administer Qualys/Tenable or similar; AWS/Azure knowledge; experience leading cross‑team remediation; familiarity with NIST/FedRAMP/HITRUST; ability to obtain Public Trust clearance.
Qualys, Tenable, AWS, Azure
2mo
Save
Mark Applied
Hide
Vulnerability Management & Response Engineer
Destin or Atlanta or New York City
HybridFull Time
Starr Companies
Starr Companies: Global commercial property and casualty insurance and investment provider.
5+ YOE5+ years running enterprise vulnerability management programs, hands-on Tenable administration, CVSS and risk-based prioritization, SCCM/Intune patching experience, strong documentation and cross-team collaboration.
Tenable, Microsoft SCCM, Microsoft Intune, SOAR, SIEM, Remedyforce, ServiceNow, CMDB, Azure, AWS, GCP
1mo
Save
Mark Applied
Hide
Lead InfoSec Engineer, Vulnerability Management
New York, New York, United States
$125k-$145k/yr OnsiteFull Time
S&P Global
S&P GlobalNYSE: SPGI: Provides financial data, analytics, and credit ratings worldwide.
7+ YOE7+ years operational security experience in vulnerability management and application security; expertise with CVE/CVSS/CWE and enterprise VM platforms; DAST/SAST experience; bachelor's or equivalent; leadership and industry certifications.
CVE, CVSS, CWE, Qualys, Tanium, Rapid7, Fortify, Checkmarx, Veracode, Power BI, Tableau
2w
Save
Mark Applied
Hide
Cybersecurity Engineer - Vulnerability Management
New York City, New York, United States
$225k-$300k/yr OnsiteFull Time
Jane Street
Jane Street: Proprietary quantitative trading and technology firm.
Hands-on vulnerability management experience, automation and scripting skills, strong judgment on risk prioritization, experience with scanning platforms and asset inventory, data pipeline and integration capability.
Rapid7, Tenable, Qualys
2mo
Save
Mark Applied
Hide
Cybersecurity Engineer - Vulnerability Management
New York City, New York, United States
$225k-$300k/yr OnsiteFull Time
Jane Street
Jane Street: Global quantitative trading firm and liquidity provider.
Hands-on vulnerability management experience in a substantial environment; automation and coding skills; experience with Rapid7/Tenable/Qualys; ability to build data pipelines, dashboards, and prioritize remediation based on exploitability.
Rapid7, Tenable, Qualys, SBOM
1mo
Save
Mark Applied
Hide
Senior Associate - Patch & Vulnerability Operations Lead
New York City, New York, United States
$112k-$159k/yr HybridFull Time
New York Life Insurance
New York Life Insurance: Providing life insurance, annuities, and long-term investment solutions.
10+ YOE10+ years in IT operations, infrastructure, security engineering, SRE, or vulnerability management; experience leading cross-functional remediation programs; familiarity with vulnerability scanning and patching governance; experience with Qualys, Tanium, ServiceNow, Jira, and CMDB.
Qualys, Tanium, ServiceNow, Jira, CMDB
1mo
Save
Mark Applied
Hide
Principal, Security Engineering & Vulnerability Management for WB Games
Burbank or New York City
$177k-$329k/yr HybridFull Time
Warner Bros. Discovery
Warner Bros. DiscoveryNasdaq: WBD: Produces and distributes multimedia entertainment content and news worldwide.
10+ YOE10+ Mgmt10+ years technical security experience and 10+ years supervisory experience; expertise in vulnerability management, secure software development (GitHub/Perforce, SAST/DAST, CI/CD, secrets management), cloud security, SIEM, EDR/XDR, IAM, and familiarity with ISO/NIST/PCI/GDPR/CCPA/SOX.
GitHub, Perforce, SAST, DAST, secrets management, CI/CD, OWASP, SIEM, EDR/XDR
1mo
Save
Mark Applied
Hide
Lead InfoSec Engineer, Vulnerability Management
New York, New York, United States
$125k-$145k/yr HybridFull Time
S&P Global
S&P GlobalNYSE: SPGI: Provides independent credit ratings, market benchmarks, and financial analytics.
7+ YOE7+ years operational security experience in vulnerability management and application security; active knowledge of CVE/CVSS/CWE; experience with Qualys/Tanium/Rapid7; bachelor's in CS/InfoSec/IT or equivalent; relevant certs (CISSP,CISM,CEH,GCIH).
CVE, CVSS, CWE, Qualys, Tanium, Rapid7, Fortify, Checkmarx, Veracode, Power BI, Tableau
3mo
Save
Mark Applied
Hide
of SVP, Vulnerability Management & Cloud Security Posture Platform Engineering
New York or Pittsburgh or Washington
$120k-$253k/yr HybridFull Time
BNY
BNYNYSE: BK: Global institution managing and servicing financial assets worldwide.
10+ YOE2+ MgmtExtensive leadership and hands-on engineering in enterprise cybersecurity, vulnerability management, cloud security posture, automation, and platform operations.
Python, Go, Java, AWS, Azure, GCP, Kubernetes, CI/CD, API technologies
2d
Save
Mark Applied
Hide
Senior Software Engineer, Java | Vulnerability
California or Colorado or Connecticut or Florida or Georgia or Illinois or Kansas or Massachusetts or Maine or North Carolina or New Jersey or New York or Oregon or Tennessee or Texas or Virginia or Washington or Austin or Tampa or Chicago
$140k-$200k/yr HybridFull Time
NinjaOne
NinjaOne: Unified IT platform for automated endpoint management and security.
10+ YOE10+ years of Java software development, 4+ years with scalable systems, REST/API and relational database experience, object-oriented design expertise, and quality testing knowledge. Bachelor's degree or equivalent experience.
Java, Kotlin, Jersey, Spring, Redis, REST
1mo
Save
Mark Applied
Hide
Senior Security Engineer
Boston or Chicago or Los Angeles or New York or San Francisco or Toronto or Vancouver or Vancouver
$145k-$175k/yr RemoteFull Time
Later
Later: Provides software for social media scheduling and influencer marketing.
5+ YOE5+ years security engineering experience; strong application, cloud, and infrastructure security; SOC 2 and compliance experience; vulnerability management, IaC and CI/CD security; strong communication and software engineering skills.
OWASP, NIST, CIS Controls, SOC 2, ISO 27001, AWS Security Hub, Azure Security Center, GCP Security Command Center, SIEM, SOAR, Terraform, CloudFormation, C#, CI/CD
1mo
Save
Mark Applied
Hide
Senior DevSecOps Engineer
United States or New York City or Charlotte
$130k-$205k/yr HybridFull Time
Red Ventures
Red Ventures: A technology-driven digital marketing and consumer media platform.
5+ YOE5+ years security/platform engineering with cloud security, Terraform, CI/CD security, vulnerability management, SOC 2 experience, scripting for automation, and experience applying AI/LLM to security operations.
Terraform, SAST, SCA, secret scanning, SBOM, CSPM, ASPM, SIEM, Wiz, Prisma Cloud, Snyk, Drata, Vanta, CI/CD, AI/LLM
1mo
Save
Mark Applied
Hide
Senior Security Engineer
New York City or United States or Canada
$180k-$210k/yr RemoteFull Time
Gauntlet: Provides risk management and yield curation for DeFi protocols.
5+ YOE5+ years security engineering experience across application security and security operations; proficiency in Python/TypeScript/JavaScript; hands-on AI/LLM automation experience; threat modeling, vulnerability triage, and security tooling ownership.
Python, TypeScript, JavaScript, Claude, Claude Code, Codex, SAST, EDR, SIEM
1mo
Save
Mark Applied
Hide
Senior Security Engineer
New York City, New York, United States
$200k-$250k/yr HybridFull Time
Novig
Novig: Operates a commission-free peer-to-peer sports betting exchange.
Senior security engineer experienced in building automation pipelines, SOAR/SIEM integrations, LLM/AI automation, end-to-end vulnerability management, policy-as-code, cloud hardening, IaC (Terraform/CDK), IAM, and MDM/EDR.
SOAR, SIEM, LLM, AI, Terraform, CDK, IaC, IAM, MDM, EDR
1d
Save
Mark Applied
Hide
Senior Product Security Engineer
New York City, New York, United States
$200k-$280k/yr HybridFull Time
Harvey
Harvey: AI platform for legal research and document analysis.
4+ YOERequires 4+ years of security-focused software engineering experience, software development expertise, vulnerability identification experience, and experience with small or hyper-growth companies.
Azure, GCP, AWS, CVEs
1mo
Save
Mark Applied
Hide
Staff Security Engineer, Application Security
Chicago or California or Colorado or Florida or Georgia or Illinois or Indiana or Minnesota or Missouri or Montana or New Jersey or New York or North Carolina or Ohio or Oregon or Pennsylvania or South Carolina or Texas or Utah or Vermont or Virginia or Washington or Washington or Wisconsin
$210k-$260k/yr HybridFull Time
NinjaTrader
NinjaTrader: Provides futures brokerage services and a trading software platform.
7+ YOE7+ years in application/product/security engineering; hands-on threat modeling, vulnerability management, secure design, CI/CD integration, automation using Python/Go; experience with cloud-native AWS/GCP environments.
AWS, GCP, Python, Go, SAST, SCA, DAST, CI/CD, AI/LLMs
3w
Save
Mark Applied
Hide
Senior Information Security Engineer, Product Security Engineering
Kirkland or New York or Seattle or Sunnyvale
$174k-$252k/yr OnsiteFull Time
Google
GoogleNASDAQ: GOOGL: Provides online search, advertising, cloud computing, and consumer electronics.
5+ YOEBachelor's or equivalent experience,5+ years security engineering and assessments,5+ years coding experience,1 year technical leadership,experience with security reviews,threat modeling,and vulnerability research.
C++, static analysis, fuzzing, Google Cloud
4w
Save
Mark Applied
Hide
Security Research Engineer, AI Safety and Security Engineering
Santa Clara or North Carolina or New York or Tennessee or Florida or California
$152k-$242k/yr HybridFull Time
NVIDIA
NVIDIANASDAQ: NVDA: Designs GPU-accelerated computing and artificial intelligence hardware.
5+ YOE5+ years security research or software engineering experience, hands-on vulnerability research/fuzzing/program analysis, strong C/C++/Python skills, rigor in patch correctness, and comfort with AI-assisted workflows.
C, C++, Python, fuzzers, static analyzers, symbolic-execution tools, AI-assisted tools, LLM