Threat & Vulnerability Engineer

Responsibilities:
You will help advance Point72's vulnerability management program across a modern, cloud-enabled technology environment, turning security findings into measurable risk reduction.
Shape the evolution of Point72's vulnerability management program by improving how teams discover, prioritize, remediate, and measure risks across technology environments.
Engineer automation that reduces manual vulnerability workflows, accelerates remediation, and improves the quality of security data used by teams and leaders.
Assess vulnerabilities across cloud, container, server, endpoint, and application environments to identify material risks and drive timely remediation.
Partner with infrastructure, cloud, development, and security teams to translate findings into clear remediation plans that align with production realities.
Develop risk-based prioritization methods that account for exploitability, asset criticality, exposure, and business context.
Improve container and cloud vulnerability coverage by refining scanning processes, integration points, and remediation feedback loops.
Create dashboards and reports that show vulnerability trends, remediation progress, control gaps, and areas requiring leadership attention.
Investigate emerging threats and vulnerability disclosures to determine potential exposure and coordinate response actions across affected teams.
Document standards, processes, and technical guidance that help teams consistently manage vulnerabilities throughout the technology lifecycle.
Requirements:
Professional experience in information security, with hands-on responsibility for threat and vulnerability management in enterprise technology environments.
Demonstrated experience maturing a vulnerability management program, including discovery, prioritization, remediation tracking, exception handling, and management reporting.
Hands-on experience securing cloud-based environments, including vulnerability assessment, misconfiguration analysis, exposure review, and remediation coordination.
Hands-on experience with container security, including image scanning, runtime risk assessment, and vulnerability remediation in containerized environments.
Strong automation and scripting skills for integrating security data, improving workflows, and reducing manual operational effort.
Solid understanding of vulnerability severity, exploitability, asset criticality, attack paths, and risk-based remediation approaches.
Ability to analyze security findings, validate risk, identify false positives, and communicate practical remediation guidance to technical teams.
Strong collaboration and ownership skills, with the ability to drive remediation across technology stakeholders in a global environment.
Excellent written and verbal English communication skills for reporting risk, explaining technical issues, and influencing remediation outcomes.
Commitment to the highest ethical standards.

Skills
Information Security, Vulnerability Assessment, Risk Assessment, Cloud Security, Networking, Network Security, Vulnerability Management, AWS, Google Cloud (GCP), Azure

Experience
5-9 yrs