Note: The job is a remote job and is open to candidates in USA. Optomi, in partnership with a leading cybersecurity organization, is seeking a Principal Security Engineer to join a growing security team modernizing enterprise vulnerability management through automation and AI-assisted workflows. The role serves as a senior technical authority for Vulnerability Management and Exposure Management, leading complex technical engagements, advising customers, developing automation and architectures, mentoring engineers, and advancing cybersecurity programs.
Responsibilities
- Serve as a senior technical authority and escalation point for complex Vulnerability Management and Exposure Management challenges
- Define the technical and programmatic strategy for complex customer engagements and help engineering teams translate engagement objectives into practical execution plans
- Lead high-impact technical work when deep expertise is required, including troubleshooting complex platform issues, evaluating architectures, designing integrations, analyzing data, and developing solutions where established runbooks do not exist
- Independently investigate unfamiliar technologies, customer environments, and technical problems and develop practical solutions without requiring detailed direction
- Advise customers on building and maturing Vulnerability Management and Exposure Management programs, including asset visibility, prioritization, remediation workflows, exception management, governance, reporting, and operating models
- Design risk-based prioritization strategies incorporating vulnerability severity, exploitability, threat intelligence, asset criticality, business context, compensating controls, and other relevant risk signals
- Understand and evaluate the entire vulnerability lifecycle from discovery through remediation and validation rather than viewing Vulnerability Management primarily as a scanning function
- Speak credibly across technologies such as Tenable, Rapid7, Qualys, Axonius, Armis, Wiz, Orca, ServiceNow, cloud-native security platforms, attack surface management technologies, remediation platforms, and other Exposure Management solutions
- Understand scanner architecture and mechanics, authenticated and unauthenticated scanning, asset identification and correlation, coverage gaps, cloud and container exposure, APIs, data pipelines, integrations, and remediation workflows
- Develop architectures, operating models, remediation strategies, roadmaps, technical recommendations, and executive-ready deliverables
- Guide engineers through complex engagements, review technical approaches and deliverables, and help ensure consistency and quality across the practice
- Mentor engineers and help develop the technical and consulting capabilities of the Exposure Management team
- Partner with practice leadership on challenging customer situations, technical escalations, new service development, and the evolution of GuidePoint's Exposure Management capabilities
- Identify recurring delivery challenges and convert successful solutions into reusable methodologies, reference architectures, automation, templates, tooling, and delivery accelerators
- Develop automation using APIs, scripting, data integrations, workflow orchestration, or other technologies to reduce manual effort and improve the scalability of Exposure Management programs
- Explore practical applications of artificial intelligence, large language models, agentic workflows, and intelligent automation within Exposure Management while understanding their limitations, security considerations, and appropriate use cases
- Support technical discovery, workshops, solution design, and pre-sales activities when advanced technical or programmatic expertise is required
- Stay current on vulnerability management, Continuous Threat Exposure Management, attack-path analysis, risk-based prioritization, cloud exposure, emerging technologies, threat intelligence, AI, and changes in how organizations identify and reduce cyber risk
- Contribute technical thought leadership internally and externally through presentations, workshops, technical guidance, service development, and reusable intellectual property
Skills
- Deeply technical: You are comfortable getting hands-on with complex technologies, APIs, integrations, data, cloud environments, scripting, and security platforms. You can troubleshoot problems beyond what is documented in a vendor knowledge base
- Independent problem solver: You do not need a runbook for every problem. You know how to investigate an unfamiliar technology or environment, break down ambiguous problems, test assumptions, and determine a path forward
- Exposure Management practitioner: You understand Vulnerability Management as an end-to-end risk reduction discipline rather than simply operating a vulnerability scanner
- Broad rather than product-limited: You understand how vulnerability management, CAASM, CNAPP, attack surface management, threat intelligence, asset management, ticketing, automation, and remediation technologies work together
- Strategic and tactical: You are equally comfortable designing an enterprise Exposure Management operating model and diving into an API, scanner configuration, dataset, or technical issue to understand why something is not working
- Consultative: You can identify the underlying problem behind a customer request and develop recommendations based on the customer's technology, organizational maturity, risk, and operational realities
- Well spoken and personable: You communicate clearly and naturally with engineers, security leaders, executives, customers, and internal teams. You can make complicated topics understandable without oversimplifying them
- Technically opinionated but pragmatic: You can develop a strong technical recommendation, explain the reasoning behind it, recognize trade-offs, and adjust when customer realities require a different approach
- A multiplier: You enjoy helping other engineers become better. You share knowledge, provide constructive technical guidance, and improve how the broader team operates
- Automation-minded: You look for opportunities to eliminate repetitive work through scripting, APIs, orchestration, integrations, and better engineering
- AI-aware: You are comfortable using modern AI capabilities as part of technical research, engineering, automation, analysis, and problem-solving and are interested in how AI will change Exposure Management and cybersecurity operations
- Curious and adaptable: You actively learn emerging technologies and security approaches and can quickly become effective in areas where you are not already the subject matter expert
Benefits
- 100% remote, EST
Company Overview
Company H1B Sponsorship