Vulnerability Management Engineer - AI Automation

Job Title:

Vulnerability Management Engineer (AI Automation)

About Trellix  
Trellix is a global cybersecurity leader helping organizations build cyber resilience for the AI era. Combining AI-native security, operational threat intelligence, and automated detection and response, Trellix provides defense-grade protection at machine speed across on-premises, air-gapped, operational technology, hybrid, and cloud environments. Trellix helps customers anticipate threats, scale effective security operations, maintain business continuity, and adapt their security posture for the modern threat landscape. Working with a broad partner ecosystem and global intelligence collaborators, Trellix helps strengthen the collective defense against cybercriminals and state-sponsored attacks. At Trellix, we empower professionals at all career stages to expand their technical expertise, lead strategic initiatives, and make a tangible global impact. Whether you are an industry pioneer or an emerging specialist, Trellix provides the tools and opportunities to enhance and expand your skill set. Join our mission to scale AI-driven cyber defense alongside an AI-accelerated threat landscape, and help build a safer, more resilient future. More at https://trellix.com.

Role Overview:

We are looking for strategic, hands-on Security Engineer to drive end-to-end vulnerability management, governance, and risk-based prioritization across hybrid, cloud, and containerized environments in alignment with NIST SSDF, EU CRA, and IEC standards. The role focuses on engineering autonomous AI agents to automate asset discovery, finding validation, exploitability analysis, ticket orchestration, and zero-day response. Candidates will lead cross-functional remediation with IT and DevOps teams, streamline exception workflows, and deliver executive-level risk reporting and metrics.

About Role:

• Direct continuous asset discovery, vulnerability assessment, remediation verification, and executive reporting across hybrid cloud, container, and application ecosystems.
• Contextualize vulnerability severity (CVSS) using real-world threat intelligence (EPSS, CISA KEV) and business criticality. Spearhead rapid response protocols for critical zero-day vulnerabilities, implementing interim compensating controls and formal risk-acceptance workflows as required.
• Architect and deploy autonomous AI agents to automate asset discovery, CMDB reconciliation, false-positive elimination, exploitability analysis, intelligent ticket routing, SLA breach escalations, and executive reporting.
• Establish and enforce program governance, remediation SLAs, and exception management frameworks aligned with NIST SSDF, EU CRA, and IEC standards.
• Define, track, and present key performance indicators (scan coverage, MTTR, SLA adherence, and vulnerability aging) to senior leadership. Partner with and mentor IT Operations, DevOps, and Software Engineering teams to accelerate remediation and embed security-by-design practices.

About You:

• 5+ years in Information Security with a strong focus on Vulnerability Management, Application Security, or Cloud Security.
• Extensive hands-on expertise with industry-leading VM, CNAPP, and AppSec solutions—including Tenable, Wiz, Qualys, CrowdStrike, or Snyk—with proven ability to programmatically orchestrate scans, ingest telemetry, and validate remediation.
• Demonstrated experience designing and deploying autonomous AI agents and multi-step LLM workflows using frameworks such as LangChain, LangGraph, CrewAI, AutoGen, or OpenAI/Anthropic SDKs to automate discovery, reconciliation, and remediation pipelines.
• Proficiency in leveraging LLMs and Retrieval-Augmented Generation (RAG) architectures to correlate vulnerability data with source code repositories, asset metadata, and exploit intelligence to filter false positives and determine real-world exploitability.
• Strong proficiency in Python for developing production-grade security automation, custom integrations, and consuming or building REST and GraphQL APIs.
• Proven experience integrating security scanners with SOAR platforms, enterprise ticketing systems (Jira, ServiceNow), CMDBs, and collaboration platforms (Slack, Microsoft Teams) for automated ticket creation, routing, reminders, and SLA escalations.
• Deep command of CVSS, EPSS, and CISA KEV methodologies, with experience enriching vulnerability telemetry using threat feeds and business impact assessments.
• Comprehensive understanding of cloud platforms (AWS, Azure, GCP), hybrid enterprise networks, container orchestration (Docker, Kubernetes), and CI/CD pipelines.
• Working knowledge of NIST SSDF, EU CRA, and IEC regulatory frameworks, paired with the ability to build automated executive dashboards tracking MTTR, scan coverage, and SLA compliance.

Company Benefits and Perks:

We believe that the best solutions are developed by teams who embrace each other's unique experiences, skills, and abilities. We work hard to create a dynamic workforce where we encourage everyone to bring their authentic selves to work every day. We offer a variety of social programs, flexible work hours and family-friendly benefits to all of our employees.

• Retirement Plans

• Medical, Dental and Vision Coverage

• Paid Time Off

• Paid Parental Leave

• Support for Community Involvement

We're serious about our commitment to a workplace where everyone can thrive and contribute to our industry-leading products and customer support, which is why we prohibit discrimination and harassment based on race, color, religion, gender, national origin, age, disability, veteran status, marital status, pregnancy, gender expression or identity, sexual orientation or any other legally protected status.

Our Commitment to You:

At Trellix, we are committed to creating a safe and trustworthy experience for our customers, employees, and candidates. Please be aware that fraudulent recruiting activity can occur through fake job postings or impersonated communications.

Trellix conducts interviews through professional channels only and does not use text messages, instant messaging, or group chats for interviews. We will never request sensitive personal information—such as your date of birth, Social Security number, or national ID number—during the interview process.

Trellix also does not require candidates to pay fees, purchase products or services, or process payments of any kind as part of the recruiting or hiring process. And Trellix will never keep any original work authorization documents that we may be required to review during the hiring process.

If you have questions or believe you may have encountered fraudulent activity related to Trellix recruiting, please contact us at[email protected].