Description
Who we are
At Domino, we build software that helps the largest, AI-driven organizations build and operate advanced data science and AI solutions at scale. Our platform integrates a streamlined model development environment, MLOps capabilities, and novel features for collaboration, reuse, and reproducibility — all of which make data science teams more productive, reduce time to value, and ensure compliance. Our customers — like Johnson & Johnson, GSK, Bristol Myers, UBS, FINRA and the US Navy — are using our software to solve some of the most important challenges in the world, such as developing new medicines, securing our financial markets, or protecting our country. Backed by Sequoia Capital, Coatue Management, NVIDIA, Snowflake and other leading investors, we have been in business for a decade but are still a small team operating with the spirit of a startup. Especially in the world of AI today, we believe that the future is still being invented — and we want to be the ones building it. For more information, visit www.domino.ai
What we are building
Domino's Security team safeguards a platform trusted by some of the most regulated organizations in the world, across financial services, pharma, government, and defense. Vulnerability Management is where that trust gets tested day to day: finding, triaging, and closing out risk across our OS, container, and dependency surface, and giving customers a clear, defensible answer when they ask how exposed they are. This role joins that function as it scales, working closely with our Staff Security Engineer to turn a fast-growing vulnerability workload into faster, more consistent risk assessments.
What your impact will be
In your first year, your impact will be:
- Faster, more consistent Vulnerability Risk Assessments. You'll own first-pass CVSS scoring and exploitability analysis, closing the SLA gap between finding and answer
- Validated, trustworthy triage. You'll reproduce and confirm customer-reported and pen-test findings before they reach Engineering, so fix priority reflects real exploitability, not just scanner severity
- Reliable scanning pipelines. You'll keep SAST/DAST and vulnerability scanning automations running, troubleshooting failures and tuning configs so the data everyone relies on stays clean
- Real partnership with Engineering. You'll build or run PoC exploits on select CVEs, bringing validated risk, not just findings, into prioritization conversations
- More capacity for the function. You'll free up our Staff Security Engineer to focus on program-level improvement instead of carrying all of vulnerability management's day-to-day load
What we look for in this role
- Hands-on experience managing vulnerabilities for a large SaaS product, across OS, container, and dependency exposure
- A track record triaging and tracking CVEs for a SaaS or containerized product: reading scan reports, prioritizing by severity, and following through to resolution
- Experience reproducing and validating reported vulnerabilities, whether from customer disclosures or pen test findings, not just logging them
- Time spent with vulnerability scanning tools such as Prisma Cloud/Twistlock, JFrog, or Trivy, including reconciling findings across tools
- Comfort building or maintaining SAST/DAST pipeline automation, and triaging what the scans turn up
- Experience partnering with Engineering to get fixes prioritized and shipped, not just reported
- Background in a highly regulated environment or modern software company, ideally one that moves at startup or scale-up speed
- Strong scripting ability, Python preferred
- Working knowledge of CVSS v3.1/v4.0 scoring and the judgment to assess risk, not just report it
- Exploit development or PoC skills to validate real-world exploitability of CVEs, using tools like Burp Suite
- Familiarity with OWASP Top 10 and testing methodology
- Working knowledge of containers and Kubernetes, plus core Linux, AWS, and networking fundamentals
- Basic understanding of authentication/authorization concepts (tokens, session handling, auth bypass patterns) and API security fundamentals
- Basic threat modeling: thinking in attack paths, not just isolated severity scores
- Clear communication, comfortable navigating risk conversations with Engineering and customers, including drafting risk statements a non-technical audience will actually read
- Comfort operating with ambiguity, since not every finding arrives with a clean severity or fix path
Nice to have:
- OSWA, OSWE, or a similar offensive security certification (e.g. GWAPT, GPEN)
- Familiarity with Airflow and Snowflake
What we value
- We value a growth mindset. High-performing creative individuals who dig into problems and see the opportunities for success
- We believe in individuals who seek truth and speak the truth and can be their whole selves at work
- We value all of you that believe improving is always possible At Domino Everything is a work in progress – we can do better at everything
- We emphasize an environment of teaching and learning to equip employees with the tools needed to be successful in their function and the company
- We strongly believe in the value of growing a diverse team and encourage people of all backgrounds, genders, ethnicities, abilities, and sexual orientations to apply
#LI-Remote
Similar jobs
Who we are Domino Data Lab powers model-driven businesses with its leading Enterprise AI platform trusted by over 20% of the Fortune 100. Domino accelerates the development and deployment of data science work while incre…
Who we are At Domino, we build software that helps the largest, AI-driven organizations build and operate advanced data science and AI solutions at scale. Our platform integrates a streamlined model development environme…
Est. 144,000 USD
About the Position We're looking for a Cybersecurity Engineer to help us mature our vulnerability management program. You'll join our Cybersecurity team, a skilled group of programmers and security experts dedicated to k…
Est. 140,000 USD
Who we are At Domino, we build software that helps the largest, AI-driven organizations build and operate advanced data science and AI solutions at scale. Our platform integrates a streamlined model development environme…
Est. 65,000 GBP
Who we are At Domino, we build software that helps the largest, AI-driven organizations build and operate advanced data science and AI solutions at scale. Our platform integrates a streamlined model development environme…
Est. 65,000 USD
EVOCS OVERVIEW EVOCS was founded with a clear purpose: to help businesses operate more effectively, solve complex challenges, and create opportunities for growth through practical expertise and technology solutions. As a…
Est. 124,000 USD
Senior Vulnerability Analyst Location: MA / Austin TX / MDTeam: Research Employment Type: Full-Time, Remote About VulnCheck Exploitation prevention is only as strong as the intelligence driving those efforts, and most of…
Est. 120,000 USD
Electrosoft Services, LLC is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, Zero Trust, dig…
Est. 140,000 USD
Engineering Manager, Rapid Response Assignment - US Location: Remote (United States (MA / Austin TX / MD) Team: Product & Engineering Employment Type: Full-Time About VulnCheck Exploitation prevention is only as stro…
Est. 120,000 USD
About VulnCheck Exploitation prevention is only as strong as the intelligence driving those efforts, and most of the industry is still running on intelligence that lacks exploit context. VulnCheck, The Exploit Intelligen…
Est. 124,000 USD
Software Engineer, Rapid Response Assignment - (US) Location: MA / Austin TX / MDTeam: Product & EngineeringEmployment Type: Full-Time, Remote About VulnCheckExploitation prevention is only as strong as the intellige…
Est. 225,000 USD
Who we are At Domino, we build software that helps the largest, AI-driven organizations build and operate advanced data science and AI solutions at scale. Our platform integrates a streamlined model development environme…
Est. 262,500 USD
CLEAR is building THE secure identity company of the future. Our mission is to make experiences safer and easier—physically and digitally. With more than 43 million Members and a growing network of partners across the wo…
Est. 90,000 USD
EVOCS OVERVIEW EVOCS was founded with a clear purpose: to help businesses operate more effectively, solve complex challenges, and create opportunities for growth through practical expertise and technology solutions. As a…
Est. 200,000 USD
At Dragos, the mission is personal. The systems we protect deliver the water you drink, power your home, and keep the hospitals your community depends on running. Those critical infrastructure systems that power our civi…
Est. 165,000 USD
At Dragos, the mission is personal. The systems we protect deliver the water you drink, power your home, and keep the hospitals your community depends on running. Those critical infrastructure systems that power our civi…
Est. 197,500 USD
Who we are At Domino, we build software that helps the largest, AI-driven organizations build and operate advanced data science and AI solutions at scale. Our platform integrates a streamlined model development environme…
Software Engineer, Rapid Response Assignment - (Singapore) Location: SingaporeTeam: Product & EngineeringEmployment Type: Full-Time, Remote About VulnCheckExploitation prevention is only as strong as the intelligence…
Est. 140,000 USD
Senior Cloud Infrastructure Engineer Location: United States (MA / Austin TX / MD) Team: Product & Engineering Employment Type: Full-Time About VulnCheck Exploitation prevention is only as strong as the intelligence…
Est. 80,000 GBP
About VulnCheck Exploitation prevention is only as strong as the intelligence driving those efforts, and most of the industry is still running on intelligence that lacks exploit context. VulnCheck, The Exploit Intelligen…
Est. 212,500 USD
Who we are At Domino, we build software that helps the largest, AI-driven organizations build and operate advanced data science and AI solutions at scale. Our platform integrates a streamlined model development environme…
Est. 80,000 GBP
Software Engineer, Rapid Response Assignment - (UK) Location: Cheltenham, UK (Remote)Team: Product & EngineeringEmployment Type: Full-Time About VulnCheckExploitation prevention is only as strong as the intelligence…
Est. 185,000 USD
Director, Engineering (US) Location: MA / Austin TX / MDTeam: Engineering Employment Type: Full-Time, Remote About VulnCheck Exploitation prevention is only as strong as the intelligence driving those efforts, and most o…
Est. 144,000 USD
Sr. Software Engineer - US Location: Massachusetts, Maryland, or Greater Austin, TX (Remote)Team: Product & EngineeringEmployment Type: Full-Time About VulnCheck Exploitation prevention is only as strong as the intel…
Est. 197,500 USD
Dive in and do the best work of your career at DigitalOcean. Journey alongside a strong community of top talent who are relentless in their drive to build the simplest scalable cloud. If you have a growth mindset, natura…
Est. 197,500 USD
Dive in and do the best work of your career at DigitalOcean. Journey alongside a strong community of top talent who are relentless in their drive to build the simplest scalable cloud. If you have a growth mindset, natura…
Est. 60,000 GBP
Vulnerability & Threat Intelligence Analyst Location: Cheltenham, UK Team: Research Employment Type: Full-Time, Remote About VulnCheck VulnCheck is transforming vulnerability intelligence by helping security teams ac…
Est. 144,000 USD
Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their re…
Est. 140,000 USD
Senior Director, Product Marketing Location: Austin, TX or Boston, MATeam: Marketing Employment Type: Full-Time, Remote About VulnCheck Exploitation prevention is only as strong as the intelligence driving those efforts,…
Est. 260,000 USD
Who we are At Domino, we build software that helps the largest, AI-driven organizations build and operate advanced data science and AI solutions at scale. Our platform integrates a streamlined model development environme…