Threat and Vulnerability Management Engineer Job at Cigres (Bengaluru)

Engineering Manager, Offensive Security & Vulnerability Management

Robinhood’s Security Operations team is seeking a strategic and technical Senior...

Location

United States , Menlo Park

Salary:

217000.00 - 255000.00 USD / Year

Robinhood

Expiration Date

Until further notice

Requirements

5+ years of experience in security
3+ years managing technical teams in Offensive Security, Red Teaming, or Vulnerability Management
Strong technical foundations in adversary simulation, threat modeling, and vulnerability lifecycle management
Strategic thinking, translating offensive findings and vuln data into business risk language and operational improvements
Experience building and scaling automated security validation (e.g. Purple teaming, attack simulation, continuous testing frameworks)
Operating in complex challenging environments and networks
Influence across functions and driving remediation outcomes without direct authority

Job Responsibility

Lead the Offensive Security team in planning and executing red team operations, internal penetration tests, and adversary emulation campaigns
Oversee the Vulnerability Management team responsible for running our bug bounty program as well as continuous discovery, triage, and remediation of vulnerabilities across infrastructure, applications, and cloud environments
Define and drive the strategy for Autonomic Security Operations, investing in automated testing and validation pipelines that codify security knowledge and detection coverage
Partner closely with engineering, product, threat intelligence and detection & response stakeholders to ensure controls are continuously tested and vulnerabilities are effectively surfaced
Build processes, tooling, and dashboards to track and communicate vulnerability and control assurance metrics to stakeholder and leadership
Contribute to long-term security planning by identifying control gaps, operational bottlenecks, and opportunities to scale security through automation

What we offer

Performance driven compensation with multipliers for outsized impact, bonus programs, equity ownership, and 401(k) matching
100% paid health insurance for employees with 90% coverage for dependents
Lifestyle wallet - a highly flexible benefits spending account for wellness, learning, and more
Employer-paid life & disability insurance, fertility benefits, and mental health benefits
Time off to recharge including company holidays, paid time off, sick time, parental leave, and more
Exceptional office experience with catered meals, events, and comfortable workspaces

Fulltime

Head of cyber threat exposure and attack surface management

Lead the enterprise-wide Continuous Threat Exposure Management (CTEM) strategy, ...

Location

United Kingdom , Knutsford

Salary:

Not provided

Barclays

Expiration Date

Until further notice

Requirements

Experience in cybersecurity with direct exposure to vulnerability management, red teaming, or threat exposure reduction
Proven track record leading programs integrating CSPM, SSPM, ASM, BAS, or exposure correlation technologies
Strong understanding of attack paths, adversary emulation, and continuous validation concepts

Job Responsibility

Own and drive the global CTEM strategy, establishing a continuous, threat-driven exposure management lifecycle aligned with NIST, MITRE, and CISA Secure-by-Design principles
Lead and develop a high-performing CTEM team, fostering collaboration, technical excellence, and an outcome-driven culture
Integrate and oversee key exposure management technologies, including Cloud Security Posture Management (CSPM), SaaS Security Posture Management (SSPM), Attack Surface Management (ASM), Breach & Attack Simulation (BAS), and other exposure correlation platforms
Correlate assets, identity, vulnerability, and configuration to identify high-impact, exploitable attack paths and inform prioritized remediation strategies
Collaborate with Application Security, Vulnerability Management, Red Team, and Security Operations to synchronize discovery, validation, and remediation of exposures across the enterprise
Align CTEM outputs with real-world adversary behaviors, leveraging Red Team and Threat Intelligence input to validate attack paths and focus on exploitable conditions
Drive automation and AI-enabled analytics to continuously map, assess, and measure reductions in the organization’s attack surface
Translate technical findings into business risk language, enabling senior leadership and risk committees to make data-driven investment decisions
Define and lead CTEM governance and operating models, ensuring exposure assessments, validation, and remediation tracking are embedded in operational processes
Establish clear KRIs and maturity metrics that demonstrate continuous improvement in visibility, validation, and response effectiveness

What we offer

Competitive holiday allowance
Life assurance
Private medical care
Pension contribution

Fulltime

Security Engineering Manager

Corporate Tools is looking for a Security Engineering Manager who eats vulnerabi...

Location

Salary:

185000.00 USD / Year

Corporate Tools

Expiration Date

Until further notice

Requirements

BS in Computer Science or equivalent experience
5+ years building and securing software — hands‑on experience with web frameworks (Rails, Django, Node, etc.) and modern architectures
Proven application security expertise: secure SDLC, OWASP, threat modeling, exploit mitigation, and vulnerability remediation
Experience leading security or engineering teams — setting strategy, running scrums, conducting reviews, and mentoring talent
Strong knowledge of cloud environments (AWS, Azure, GCP) and securing databases (SQL/NoSQL) in production
Exposure to offensive and defensive security practices — red team, blue team, or incident response experience a plus
Ability to communicate risk and solutions to execs, engineers, and auditors — respected by hackers and trusted by leadership
Pragmatic mindset: knows when to enable speed, when to block, and how to automate guardrails to keep teams fast and safe

Job Responsibility

Lead 6 security engineers across three specialized teams: Red (offense), Blue (defense), and Orange (compliance)
Own the security strategy and execution for offensive testing, defensive monitoring, and compliance work — ensuring all three disciplines are aligned
Act as the technical anchor for the teams: review code, guide exploits, drive secure architecture decisions, and mentor engineers
Partner with product and engineering leads to embed security into development (threat modeling, secure coding, CI/CD guardrails)
Build internal security tools and automation that make it easier for product teams to ship securely
Oversee red team engagements and turn findings into actionable fixes, not just reports
Manage defensive capabilities — incident response, detection engineering, monitoring — and continually improve them
Ensure compliance frameworks (SOC2, ISO, PCI, etc.) are met without slowing innovation or creating unnecessary bureaucracy
Set a high technical bar: coach, mentor, and challenge engineers to pursue elegant, practical security solutions
Balance being a builder and a leader: stay hands‑on enough to earn respect from hackers, but prioritize leading and scaling the team’s impact

What we offer

100% employer-paid medical, dental and vision for employees
Annual review with raise option
22 days Paid Time Off accrued annually, and 4 holidays
After 3 years, PTO increases to 29 days. Employees transition to flexible time off after 5 years with the company—not accrued, not capped, take time off when you want
The 4 holidays are: New Year’s Day, Fourth of July, Thanksgiving, and Christmas Day
Paid Parental Leave
Up to 6% company matching 401(k) with no vesting period
Quarterly allowance
Use to make your remote work set up more comfortable, for continuing education classes, a plant for your desk, coffee for your coworker, a massage for yourself... really, whatever
Open concept office with friendly coworkers

Vulnerability Management Technical Lead

The role includes managing and optimizing vulnerability management workflows usi...

Location

India , Bengaluru

Salary:

Not provided

Sopra Steria

Expiration Date

Until further notice

Requirements

4 to 8 years of experience
engineering graduate - preferably B.E./B.Tech in IT or Computer Engineering
strong analytical skills
experience with security information and event management (SIEM) tools
~5 years of experience in information security, specifically in end-to-end vulnerability management with 2-3 years hands-on Rapid7 experience
advanced degrees or certifications preferred
knowledge of current cybersecurity trends, threats, and techniques
understanding of regulatory requirements
ability to work independently and collaboratively
good interpersonal and communication skills

Job Responsibility

ensure that Rapid7 is fully and effectively implemented
assist with design, implementation, and optimization of automated tagging workflows
build and refine InsightVM dashboards and reports for insights
integrate Rapid7 with external systems for accurate asset context and automated remediation ticket creation
collaborate with IT teams to reduce false positives and orphaned assets
implement and support scan scheduling and tuning
assist in risk acceptance workflows
troubleshoot scan and synchronization issues
drive process improvements in vulnerability management workflow
deliver security reports and presentations

What we offer

inclusive and respectful work environment
positions open to people with disabilities

Fulltime

Product Security Engineer- Threat Researcher

The Senior Security Engineer/Threat Researcher position will be part of Aruba Th...

Location

Puerto Rico , Aguadilla

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

B.S. or M.S. in software engineering, computer science, cybersecurity or a related field (or equivalent experience)
6+ years of professional experience in software engineering, vulnerability research, penetration testing, or a related security discipline
Programming experience in C and at least one additional language used for secure software development, such as Rust, Go, or Python
Hands-on experience with security testing tools and techniques, such as fuzzing, reverse engineering, and exploit development frameworks (e.g., Metasploit, Immunity Debugger, Ghidra, or IDA Pro)
Understanding of memory-unsafe vulnerabilities, including buffer overflows, use-after-free, integer overflows, and format string vulnerabilities, as well as mitigation techniques such as ASLR, DEP, and stack canaries
Strong knowledge of web application security, including OWASP Top 10 vulnerabilities such as XSS, SQL injection, XXE, CSRF and insecure deserialization
Familiarity with secure coding practices, threat modeling, and static and dynamic application security testing (SAST/DAST) tools
Knowledge of modern cryptographic algorithms and security protocols (e.g., TLS, IPsec, OAuth) and their implementation pitfalls
Demonstrated ability to analyze, exploit, and remediate security vulnerabilities in complex codebases
Strong written and verbal communication skills, with the ability to create detailed technical reports and convey complex concepts to both technical and non-technical stakeholders. English advanced

Job Responsibility

Conduct advanced security assessments of HPE Aruba networking products, including manual code reviews and penetration testing, to uncover vulnerabilities such as memory-unsafe errors, insecure deserialization, and authentication/authorization flaws
Develop proofs of concept (PoCs) to demonstrate the exploitability of identified vulnerabilities and provide actionable remediation guidance to engineering teams when requested
Develop and maintain custom tools to assist in vulnerability discovery, exploit development, and tracking and disclosure of vulnerabilities to the public
Assist in managing Aruba’s bug bounty program, collaborating with external researchers and product engineering teams to triage, reproduce, and remediate reported vulnerabilities
Assist in writing vulnerability disclosure bulletins and managing the process of releasing those bulletins to the public
Serve as a subject-matter expert on secure coding practices, particularly in memory-safe and memory-unsafe programming languages, and evangelize these practices across product engineering teams
Conduct original security research on non-Aruba products and technologies, including discovering new vulnerabilities, publishing papers, and presenting at leading security conferences
Positively represent Aruba in the global security community by fostering collaboration with security researchers while balancing the goals of researchers with the needs of our customers

What we offer

Health & Wellbeing
Personal & Professional Development
Unconditional Inclusion

Fulltime

Chief Cybersecurity Solutions Officer

Loginsoft is a renowned provider of cybersecurity engineering services, speciali...

Location

United States , Washington, DC

Salary:

Not provided

Loginsoft

Expiration Date

Until further notice

Requirements

10-15 years in technology solutions and engineering services, with 7-10 years in delivering effective cybersecurity solutions
Strong background in solution development, user research, and agile environments
Deep industry knowledge essential for strategic vision and planning
Proficient in impactful presentations, deal negotiation, and building client relationships
Effective representation of customer and end-user voices
Strong in developing simplified marketing content
Demonstrate leadership to effectively lead cross-functional teams, drive collaboration, and foster cross-functional teamwork, communication, and effective leadership
Demonstrate deal-closing expertise and stakeholder collaboration
Showcase familiarity with emerging cybersecurity tech for a visionary roadmap
Possess strategic thinking, entrepreneurial spirit, and strong understanding of the cybersecurity marketplace, including buyer and end-user priorities, with research, feedback, and effective communication skills

Job Responsibility

Cybersecurity Leadership and Roadmap Development: Lead and leverage expertise in threat intelligence, vulnerability management, cloud security, threat hunting, and threat detection. Address client pain points, stay informed on research, emerging technologies, and industry trends. Shape the cybersecurity solutions roadmap, evaluating emerging technology applications and their impact on partnerships, pricing, and planning. Foster a shared vision and advocate for the customer perspective throughout development, delivery, and deployment
Cybersecurity Engineering Services Growth and Adoption: Drive the growth and adoption of cybersecurity engineering services by driving penetration of existing solutions in the existing markets / cybersecurity product companies, and extending solutions to enterprise companies, delivering talented engineering resources and customized offerings. Collaborate with the CRO and CTO to align revenue generation efforts and customer satisfaction goals. Ensure the viability, feasibility, and desirability of security services by leveraging cybersecurity experience and industry knowledge. Gain comprehensive insights into the cybersecurity industry, including offerings, tools, major players, and trends. Work closely with stakeholders to fuel revenue growth and champion the customer's voice
Client Engagement and Relationship Management: Serve as a key point of contact for new clients / customers, collaborating with the CRO and CTO to deliver compelling presentations, lead negotiations, and align revenue goals with client expectations. Build and nurture lasting client relationships through effective communication, understanding their needs, and ensuring customer satisfaction. Represent the voice of the customer, working closely with stakeholders, including the CRO and CTO, to drive revenue growth and maintain strong partnerships
Strategic Partnerships and Collaborations: Forge strategic partnerships and collaborations by establishing strong relationships with industry stakeholders, fostering collaboration, and creating opportunities for joint initiatives and market expansion. Collaborate with marketing and communications teams to develop impactful content and messaging that effectively communicates the value and benefits of cybersecurity engineering services
Thought Leadership and Innovation: Provide thought leadership and innovation in the cybersecurity industry by staying informed about research advancements, emerging technologies, and industry trends. Identify opportunities to leverage existing innovations and invest in new ideas to deliver valuable cybersecurity solutions. Utilize deep knowledge of the industry, customers, and end-users to predict the future, define roadmaps, and position the cybersecurity solutions and the company as a leader in the market. Actively engage on LinkedIn and other social media platforms to promote our services and participate in industry forums as a speaker to drive industry recognition and engagement
Deal Closing and Strategic Collaboration: Collaborate with stakeholders, including the CTO, CRO, partners, and clients, to align strategies with market trends and customer needs. Drive the efforts to close deals by capitalizing on the abundant leads and opportunities we receive. Conduct research and gather feedback to define the vision, goals, and roadmap for cybersecurity solutions. Provide strategic guidance for business development, leveraging your expertise in successful deal closures. Foster cross-functional collaboration to bring industry-leading cybersecurity solutions to market, driving adoption, and ensuring successful outcomes

Fulltime

Cloud Cybersecurity Engineer

This role will be focused on helping to prevent and protect Fever from security ...

Location

Spain , Madrid

Salary:

Not provided

Fever

Expiration Date

Until further notice

Requirements

Hands-on expertise in vulnerability management for cloud environments, containers, and applications
Proficiency in scripting for automation and security operations (Python, Go or similar)
Strong experience with AWS cloud infrastructure security including configurations, networking, Identities, etc.
Deep understanding of cloud security frameworks, best practices and secure architecture principles
Ability to analyze security threats and implement proactive defense mechanisms
Strong analytical and problem-solving skills
Ability to work cross-functionally to drive security initiatives
4+ years of experience in cloud security and/or cybersecurity roles
Bachelor or Master’s Degree in Computer Science, Information Security, or another similar relevant degree (or equivalent experience in a technical security role)
Fluent in english

Job Responsibility

Manage and improve the vulnerability management process for cloud environments including containers, hosts and applications
Conduct regular security assessments to identify vulnerabilities and misconfigurations in the AWS ecosystem
Enforce AWS security best practices, including secure configurations, architecture and processes
Perform risk assessments based on cloud architecture best practices to provide technical security expertise to stakeholders in implementing secure solutions
Develop and deploy automated security solutions to improve vulnerability reporting, tracking and remediation processes
Collaborate with DevOps and engineering teams to integrate security best practices into cloud environments
Monitor performance of vulnerability management, secure configuration and architecture implementations

What we offer

Opportunity to have a real impact in a high-growth global category leader
40% discount on all Fever events and experiences
Position based in Madrid, home office friendly
Relocation package for international candidates
Responsibility from day one and professional and personal growth
Great work environment with a young, international team of talented people to work with
Health insurance and other benefits such as Flexible remuneration with a 100% tax exemption through Cobee
English Lessons
Gympass Membership
Possibility to receive in advance part of your salary by Payflow

Fulltime

Appsec Engineer

This role will focus on preventing and protecting Fever from security threats, v...

Location

Spain , Madrid

Salary:

Not provided

Fever

Expiration Date

Until further notice

Requirements

Hands-on expertise in vulnerability management for cloud environments, containers, and applications
Proficiency in scripting for automation and security operations (Python, Go or similar)
Strong experience with AWS cloud infrastructure security including configurations, networking, Identities, etc.
Deep understanding of cloud security frameworks, best practices and secure architecture principles
Ability to analyze security threats and implement proactive defense mechanisms
Strong analytical and problem-solving skills
Ability to work cross-functionally to drive security initiatives
4+ years of experience in cloud security and/or cybersecurity roles
Bachelor or Master’s Degree in Computer Science, Information Security, or another similar relevant degree (or equivalent experience in a technical security role)
Fluent in english

Job Responsibility

Manage and improve the vulnerability management process for cloud environments including containers, hosts and applications
Conduct regular security assessments to identify vulnerabilities and misconfigurations in the AWS ecosystem
Enforce AWS security best practices, including secure configurations, architecture and processes
Perform risk assessments based on cloud architecture best practices to provide technical security expertise to stakeholders in implementing secure solutions
Develop and deploy automated security solutions to improve vulnerability reporting, tracking and remediation processes
Collaborate with DevOps and engineering teams to integrate security best practices into cloud environments
Monitor performance of vulnerability management, secure configuration and architecture implementations

What we offer

Opportunity to have a real impact in a high-growth global category leader
40% discount on all Fever events and experiences
Position based in Madrid, home office friendly
Relocation package for international candidates
Responsibility from day one and professional and personal growth
Great work environment with a young, international team of talented people to work with
Health insurance and other benefits such as Flexible remuneration with a 100% tax exemption through Cobee
English Lessons
Gympass Membership
Possibility to receive in advance part of your salary by Payflow

Fulltime

Threat and Vulnerability Management Engineer

Cigres

Location:
India , Bengaluru

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:
January 26, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Threat and Vulnerability Management Engineer

Engineering Manager, Offensive Security & Vulnerability Management