Vulnerability Management Engineer

Backblaze, a leader in open cloud storage solutions, is seeking a Vulnerability Management Engineer to enhance its security posture. This role is integral to the Security team, focusing on proactive identification and management of vulnerabilities across the company's infrastructure, applications, and services. As a remote-first company, Backblaze offers flexibility in work location, with opportunities in Colombia, Costa Rica, and Mexico.

In this position, the engineer will drive risk-based vulnerability and exposure management by correlating threat intelligence with asset inventory, software configurations, and system setups. The role involves assessing exploitability, incorporating AI-assisted analysis, and collaborating with the Red Team to validate vulnerabilities. Additionally, the engineer will identify compensating controls when immediate patching isn't feasible and automate various aspects of vulnerability management.

Candidates should have experience in enterprise vulnerability management, with a strong understanding of infrastructure, applications, cloud services, and software dependencies. Proficiency in interpreting vulnerability intelligence, risk-based prioritization techniques, and scripting or automation is essential. Familiarity with frameworks like OWASP Top 10 and MITRE ATT&CK is preferred.

Backblaze offers a competitive salary, equity in a growing company, a 401(k) retirement plan, comprehensive healthcare for families, parental leave with reintegration support, dental and vision plans, a learning and development program, and flexible paid time off.

The company fosters a culture of fairness, openness, and continuous improvement. With a mission to make customers unstoppable by solving their toughest data storage challenges, Backblaze provides opportunities for professional growth and encourages applicants who align with these values to apply.