[Remote] Senior Security Engineer
Note: The job is a remote job and is open to candidates in USA. Fullsteam is a leading provider of vertical software and embedded payments technology dedicated to helping businesses flourish. They are seeking a Senior Security Engineer to join their Proactive Security team, focusing on maturing the vulnerability management program and ensuring identified risks are remediated across the enterprise.
Responsibilities
- Contribute to and help mature our vulnerability management program, ensuring identified risks are remediated according to SLAs across the enterprise and business units
- Identify and report known vulnerabilities across infrastructure (cloud and on-prem), applications, software, AI systems, and external attack surface
- Monitor external attack surface exposures and contribute to remediation prioritization
- Produce vulnerability metrics, trending reports, and risk summaries for security leadership and business unit stakeholders
- Support alignment of the VM program with industry regulations and standards (PCI-DSS, SOC2, NIST CSF, ISO 27001)
- Collaborate with Security, IT, and BU Engineering teams to drive effective and measurable vulnerability and risk exposure outcomes
- Contribute to risk management and governance functions (e.g., risk register, key metrics, vulnerability reports)
- Develop and contribute to AI-assisted HITL (Human in the Loop) automation and workflows for Proactive Security initiatives
- Collaborate with and learn alongside other Proactive Security team members
Skills
- 8+ years of Information Technology / Security experience with 2-4+ years of hands-on experience in vulnerability management, attack surface management, or related security functions
- Working knowledge of security tools such as Wiz, Snyk, Qualys, Nessus, MS Defender, or similar platforms
- Experience with vulnerability prioritization frameworks (CVSS, EPSS, risk-based scoring)
- Experience with application security testing concepts and tools (SAST, DAST, IAST, Burp Suite, Postman, GitHub, etc.)
- Basic scripting or programming experience in any language, or a strong desire to develop this skill
- Ability to produce clear, actionable security reporting for both technical and non-technical audiences
- Hands-on experience with AI-assisted security workflows (prompt engineering, agent development, MCP tooling)
- Experience developing or contributing to process documentation
- Ability to work independently in a fully remote environment while managing multiple concurrent priorities
- Experience working in a multi-business-unit or enterprise environment
- Genuine curiosity and desire to grow
- CISSP or equivalent certification (GIAC, CISM, CRISC)
- Bachelor's degree in cybersecurity or equivalent work experience
- Hands-on Defensive or Offensive security training or work experience
- Project management knowledge, training and/or certifications
Company Overview
Company H1B Sponsorship