```html
About brighthush
brighthush is a trailblazing cybersecurity firm that harnesses the power of artificial intelligence and real‑time endpoint intelligence to deliver Autonomous IT solutions. Our mission is to empower IT and security teams worldwide to protect their most critical assets, accelerate innovation, and maintain resilience at scale. Trusted by leading enterprises, governments, and Fortune 500 organizations, brighthush’s unified platform delivers unparalleled visibility, rapid response, and actionable insights that keep businesses unstoppable.
Role Overview
We are seeking an experienced Senior Security Engineer to join brighthush’s Customer Transparency team within the R&D Security organization. In this pivotal role, you will be the bridge between our internal security engineering capabilities and the external stakeholders—customers, partners, and the broader security community. You will own and evolve our vulnerability disclosure program, develop deep customer‑centric security solutions, and ensure that brighthush’s security posture is transparent, auditable, and actionable.
Why This Role Matters
Customers rely on brighthush to secure some of the most consequential networks in the world. They expect not only robust protection but also clear, understandable security metrics that they can act upon. As the face of brighthush’s R&D Security organization to the outside world, you will shape how we communicate risk, how we collaborate with researchers, and how we close gaps that customers cannot see. Your work will directly influence the trust and confidence that our clients place in brighthush.
Key Responsibilities
- Build & Maintain Security Tooling – Design and implement automated security tools, incorporating AI where it adds value, to streamline vulnerability detection, triage, and remediation workflows.
- Customer Visibility & Gap Closure – Identify blind spots in customers’ deployments, partner with Engineering and Product teams to deliver solutions that expose and mitigate those gaps.
- SBOM & Vulnerability Management – Lead the Software Bill of Materials (SBOM) strategy, oversee vulnerability lifecycle management, and provide clear visibility to both internal stakeholders and external partners.
- Stakeholder Collaboration – Work closely with Customers, Partners, and the brighthush Customer organization to surface real‑world security needs, transform recurring questions into engineering challenges, and build systems that solve them.
- Technical Support & Escalations – Serve as the go‑to security expert for customer‑facing teams, answering inbound inquiries, maintaining a library of reusable responses, and engaging directly with customers when necessary.
- Bug Bounty Program Administration – Triage inbound reports against SLAs, assess exploitability and severity, adjudicate duplicates, recommend rewards, and nurture productive relationships with external researchers.
- Security Advisories & CVE Management – Author and publish brighthush Security Advisories, assign CVE identifiers, classify with CWE, and score with CVSS.
- Disclosure Coordination – Manage timing and embargoes across researchers, customers, partners, and external coordinating bodies to ensure coordinated, responsible disclosure.
Essential Qualifications
- Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience).
- Minimum 5 years of industry experience in product or application security, vulnerability research, or software engineering with a strong security focus (7+ years preferred).
- Proven experience interacting with customers and external security researchers.
- Hands‑on experience applying AI tooling to security workflows, with a critical understanding of when AI adds value versus when it generates noise.
- Track record of building tools or data interfaces that serve external stakeholders, including support teams and customers.
- Strong familiarity with modern software engineering practices, including Git, CI/CD pipelines, and automated testing.
- Expertise in determining vulnerability severity, exploitability, and business impact.
Preferred Qualifications
- Experience with SCA/SBOM tooling and third‑party dependency vulnerability management.
- Hands‑on knowledge of coordinated vulnerability disclosure, CVE assignment, CVSS scoring, CWE classification, and CNA operations.
- Experience running or supporting a bug bounty program or Vulnerability Disclosure Program (VDP).
- Published vulnerability research, credited CVEs, bug bounty findings, open‑source security tooling, or conference talks.
- Deep understanding of brighthush’s products and services.
- Strong applied cryptography knowledge, including encryption, hashing, and secure key management.
Core Competencies & Soft Skills
- Demonstrates initiative, self‑motivation, and a proactive mindset.
- Exceptional oral and written communication skills, capable of translating complex security concepts to diverse audiences.
- Team player who thrives in cross‑functional collaborations.
- Upholds the highest standards of ethics, integrity, and professionalism.
- Adaptable to fast‑paced, evolving environments with shifting priorities.
Career Growth & Learning Opportunities
At brighthush, your career trajectory is defined by continuous learning and impact. As a Senior Security Engineer, you will:
- Lead high‑visibility security initiatives that shape the future of our platform.
- Mentor junior engineers and security analysts, fostering a culture of knowledge sharing.
- Participate in industry conferences, speak on panels, and contribute to open‑source security projects.
- Access internal training programs, certifications, and a generous learning stipend to stay ahead of emerging threats.
- Progress into leadership roles such as Security Program Manager, Director of Vulnerability Management, or Chief Security Officer.
Work Environment & Company Culture
brighthush is built on a foundation of collaboration, respect, and diversity. Our culture encourages:
- Transparent communication across all levels.
- Inclusive decision‑making that values diverse perspectives.
- Work‑life balance, with flexible remote work options and generous vacation policies.
- Community engagement, including 5 days of volunteer time off (VTO) for each employee.
- A commitment to continuous improvement, innovation, and ethical leadership.
Compensation & Benefits
We offer a competitive total rewards package that includes:
- Base salary range: $191,000 – $293,000 per year (location and experience based).
- Equity awards that align your success with the company’s growth.
- Comprehensive health benefits: medical, dental, vision, and wellness programs.
- Family planning support, including fertility benefits and parental leave.
- Health Savings Account (HSA) and Flexible Spending Account (FSA) options.
- Transportation savings account and remote work stipend.
- 401(k) retirement plan with company match.
- Life, accident, and disability coverage.
- Employee Assistance Program (EAP) and mental health resources.
- Well‑being initiatives such as on‑site fitness classes, mindfulness sessions, and health challenges.
How to Apply
Ready to make a tangible impact on the security posture of one of the world’s most trusted cybersecurity platforms? Submit your application through our careers portal or click the link below. We look forward to learning how your expertise can help brighthush continue to lead the industry.
Equal Opportunity Statement
brighthush is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, gender identity, sexual orientation, disability, protected veteran status, or any other legally protected category. If you Apply for this job