Cybersecurity Engineer - Vulnerability Management
Jane StreetNew York, New York, United States · Posted 2 months agoDescription
About the Position
We're looking for a Cybersecurity Engineer to help us mature our vulnerability management program. You'll join our Cybersecurity team, a skilled group of programmers and security experts dedicated to keeping the firm safe.
Vulnerability management is the focus of this role, but it doesn't tell the whole story—we want a well-rounded engineer whose knowledge spans the different facets of cybersecurity, because that broader perspective is what lets you reason well about real risk and where to spend effort.
Vulnerability management is a well-established part of how we keep the firm safe, and as we grow, we're continuing to invest in it, with a particular focus on automation and on scaling the program to keep pace with an expanding environment.
This is a hands-on, build-heavy role. We want someone with a strong technical foundation who isn't afraid to build something themselves, who has good judgment about what actually matters, and who can explain the "why" behind a risk and its mitigation. Manual triage doesn't scale at our size, so you'll lean on automation, including AI tooling paired with good judgment, knowing where it helps and when we need a human in the loop.
Your work will also include:
- Supporting and improving the vulnerability management lifecycle end to end, from discovery and validation through triage, assignment, remediation tracking, and verification
- Reviewing new findings from automated scanning tools, threat intel, and security advisories, then prioritizing based on real exploitability and exposure rather than severity score alone, so we act on what genuinely matters
- Validating and deduplicating findings across sources, confirming whether an affected product or component is actually present, and routing work to the team that owns the fix
- Measuring scanning coverage and data quality and knowing what isn't being scanned, where scans are stale, and where authentication is failing, rather than assuming coverage is complete
- Driving automation across vulnerability management tooling and processes
- Broadening scanning coverage across asset classes, including evaluating and migrating scanning platforms as needed
- Bringing software inventory and SBOM data into the picture so we can answer where a vulnerable component is used across our software, not just what's running on a given host
- Building dashboards and metrics that measure coverage, SLAs, and progress
About You
- You automate rather than do things by hand, keep your code and configs in version control by default, work comfortably under code review, and care about leaving things maintainable
- You’re comfortable working with data, querying and shaping it, and building and debugging the data pipelines and integrations that stitch messy, inconsistent inputs into something dependable
- You have hands-on vulnerability management experience in a substantial environment, including experience with an automated scanning platform such as Rapid7, Tenable, or Qualys, and an understanding of how scanning, asset inventory, and remediation tracking fit together
- You’re a measured responder who reasons about trade-offs and context, understands threat modeling, and knows not every finding deserves the same urgency
- You follow cybersecurity developments and can tell the difference between an interesting hack and what matters day-to-day
- You understand and practice good personal cybersecurity hygiene, and can talk to others about it
- You’re a clear communicator across audiences, who writes things down so others can follow
- You have a positive and collaborative attitude; You understand that a key component of cybersecurity is bringing others along with you on the journey
If you're a recruiting agency and want to partner with us, please reach out to agency-partnerships@janestreet.com
Similar jobs
Est. 144,000 USD
About the Position We're looking to add a full-time, passionate Cybersecurity Engineer to our New York office to help protect our company's people, data, and infrastructure from the wilds of the internet. Our Cybersecuri…
Est. 120,000 USD
About the Position We're looking to add a passionate Cybersecurity Engineer to our New York office to help protect Jane Street’s employees, data, and infrastructure from the wilds of the internet. Our Cybersecurity Engin…
Est. 80,000 GBP
About the Position We're looking to add a full-time, passionate Cybersecurity Engineer to our London office to help protect our company's people, data, and infrastructure from the wilds of the internet. Our Cybersecurity…
Est. 120,000 USD
About the Position We are looking for an IT Security Engineer with a strong Windows engineering background and practical exposure to modern platform security controls to join a global team dedicated to securing Jane Stre…
About the Position We're looking to add a full-time, passionate Cybersecurity Engineer to our Hong Kong office to help protect our company's people, data, and infrastructure from the wilds of the internet. Our Cybersecur…
Est. 120,000 USD
Electrosoft Services, LLC is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, Zero Trust, dig…
About the Position We're looking to add a passionate Cybersecurity Engineer to our Hong Kong or Singapore office to help protect Jane Street’s employees, data and infrastructure from the wilds of the internet. Our Cybers…
About the Position We're looking to add a full-time, passionate Cybersecurity Engineer to our Singapore office to help protect our company's people, data, and infrastructure from the wilds of the internet. Our Cybersecur…
Est. 120,000 USD
About the Position Our goal is to give you a real sense of what it's like to work at Jane Street full time while also providing a truly unparalleled educational experience. As an intern, you'll be paired with full-time e…
About the Position We're looking to add a passionate Cybersecurity Engineer to our Hong Kong or Singapore office to help protect Jane Street’s employees, data and infrastructure from the wilds of the internet. Our cybers…
About the Position We're looking for a hands-on Cybersecurity Engineer to join our Cybersecurity team to strengthen the security posture of our applications, data, infrastructure, and processes. The role combines both ha…
Est. 124,000 USD
Electrosoft Services, LLC is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, Zero Trust, dig…
Est. 90,000 GBP
About the Position We're looking for a hands-on Cybersecurity Engineer to join our Cybersecurity team to strengthen the security posture of our applications, data, infrastructure, and processes. The role combines both ha…
Est. 80,000 USD
About the Role iCapital is looking to hire a Cyber Security Vulnerability Management Specialist Associate to join the Information Security team. This role is responsible for supporting the identification, triage, priorit…
Est. 262,500 USD
CLEAR is building THE secure identity company of the future. Our mission is to make experiences safer and easier—physically and digitally. With more than 43 million Members and a growing network of partners across the wo…
About the position We're looking to add a passionate Cybersecurity Detection and Response Analyst to our Hong Kong office to help protect Jane Street’s employees, data and infrastructure from the wilds of the internet. T…
Est. 125,000 USD
About the Position We are looking for an experienced Network Engineer to join our Network Security team to help us run, scale, and continuously improve our network security infrastructure through hands-on operations, des…
Est. 144,000 USD
Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their re…
Electrosoft Services, LLC is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, Zero Trust, dig…
Est. 80,000 GBP
About the Position We are looking for an Infrastructure Security Engineer with a strong Windows engineering background and practical exposure to modern platform security controls to help our global team secure Jane Stree…
Est. 144,000 USD
Electrosoft Services, LLC is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, Zero Trust, dig…
Est. 120,000 USD
SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with…
Est. 120,000 GBP
About the Position We are looking for an experienced Network Engineer to join our Network Security team to help us to run, scale and continuously improve our network security infrastructure through hands-on operations, d…
Est. 250,000 USD
Figure is an AI Robotics company developing a general purpose humanoid. Our humanoid robot, Figure 02, is designed for commercial tasks and the home. We are based in San Jose, CA and require 5 days/week in-office collabo…
Job Title - Cybersecurity Engineer Key Skills - Tenable Nessus Experience - 5+ years Location - Singapore Requirements At least 5 years of relevant experience in cybersecurity. Candidates with relevant certifications suc…
Est. 124,000 USD
Position Overview: The Senior Information Security Engineer is tasked with overseeing the development and deployment of advanced security solutions across an organization’s technology stack. They lead complex projects, s…
Est. 129,500 USD
CLEAR is building THE secure identity company of the future. Our mission is to make experiences safer and easier—physically and digitally. With more than 43 million Members and a growing network of partners across the wo…
Est. 120,000 EUR
We are looking for a Cyber Defense Manager to lead, mature, and operate our resilient security operations capability. In this role, you will own the defense of our environment, ensuring fast and precise threat detection,…
Est. 120,000 USD
Join Frazier & Deeter and be a part of a rapidly growing Top 50 accounting & advisory firm that has been repeatedly named a Best Firm to Work For, a Best Firm for Women and a Pacesetter firm among U.S. accounting…
Est. 144,000 USD
Security Engineer Overview Thunes Financial Services is hiring a Security Engineer to be the architect of trust for our fintech platform. We are looking for a hybrid specialist who can bridge the gap between Infrastructu…