Remote opportunity at
RecursionSenior Engineer, Exposure & Vulnerability Management
Recursion is seeking a Senior Engineer, Exposure & Vulnerability Management to lead the transition from periodic scanning to a proactive, continuous threat exposure management strategy. This…
Career Tools
About This Role
Recursion is seeking a Senior Engineer, Exposure & Vulnerability Management to lead the transition from periodic scanning to a proactive, continuous threat exposure management strategy. This full-time position is remote in the United States, though employees are required to make regular on-site visits for routine work and departmental events. The estimated annual base salary ranges from USD 134,200 to 180,600, with additional eligibility for an annual bonus, equity compensation, and…
Job Description
Recursion is seeking a Senior Engineer, Exposure & Vulnerability Management to lead the transition from periodic scanning to a proactive, continuous threat exposure management strategy. This full-time position is remote in the United States, though employees are required to make regular on-site visits for routine work and departmental events. The estimated annual base salary ranges from USD 134,200 to 180,600, with additional eligibility for an annual bonus, equity compensation, and comprehensive benefits.
In this role, the engineer will design and deploy multi-agent systems to handle exposures from discovery through automated validation and patch generation. The work involves replacing static CVSS scoring with context-aware prioritization based on live exploit intelligence, business criticality, and real-time reachability analysis. The selected candidate will partner closely with Engineering and IT teams to embed secure-by-default practices, architect cloud-native asset-inventory workflows, and integrate remediation pipelines directly into ticketing and CI/CD systems.
Recursion is a clinical-stage TechBio company headquartered in Salt Lake City, Utah, that decodes biology using an AI-native drug discovery platform known as the Recursion OS. The organization builds automated laboratories and scalable data systems to advance investigational medicines across various therapeutic areas. This role suits an experienced security professional with a background in modern vulnerability management, cloud environments, and artificial intelligence orchestration who wants to support critical scientific discovery.
Responsibilities
- Design and deploy multi-agent systems to discover, analyze, patch, and validate exposures automatically
- Implement approval gates, rollback controls, and audit trails for automated security workflows
- Build prioritization engines utilizing real-time reachability, attack-path context, and live exploit intelligence
- Drive the Continuous Threat Exposure Management strategy across products, cloud, and on-premise infrastructure
- Architect cloud-native asset discovery and remediation workflows integrated with CI/CD and ticketing tools
- Partner with IT and Engineering to establish secure-by-default practices and risk-matched remediation timelines
- Define key performance and risk indicators such as mean time to remediate and critical asset coverage
- Design exposure and vulnerability controls that support compliance standards like SOC2
Requirements
- Seven or more years of experience in vulnerability management, exposure management, or related information security domains
- Proven track record of managing large-scale programs from strategy to execution in cloud-first and hybrid settings
- Hands-on experience building or deploying AI and LLM-based agents or multi-agent systems for security or engineering
- Working knowledge of approval workflows, audit logging, and automated remediation rollback controls
- Proficiency in scripting and programming languages such as Python, Go, or Java
- Expert-level experience with exposure management platforms like Tenable, Qualys, or Rapid7
- Strong command of CVSS, EPSS, CISA KEV, reachability analysis, and threat intelligence feeds
- Experience with AWS, Azure, GCP, container security, Kubernetes, and Infrastructure-as-Code tools like Terraform
- Familiarity with CI/CD pipelines, software supply chain security, SBOMs, and dependency mapping
- Commitment to regular on-site visits for routine work and departmental events
Qualifications
- Bachelor's or Master's degree in Computer Science, Information Security, or a related field
- Relevant security certifications such as CISSP, OSCP, or GWAPT
Core Skills
Benefits
- Annual bonus eligibility
- Equity compensation
- Comprehensive benefits package
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this position remote?
Yes, this is a remote position based in the United States, though employees are required to commit to regular on-site visits for routine work and departmental events.
What is the salary range for this role?
The estimated annual base salary ranges from USD 134,200 to 180,600, and the position is also eligible for an annual bonus, equity compensation, and comprehensive benefits.
What level of experience is required?
Candidates need seven or more years of experience in vulnerability management, exposure management, or related information security domains, including leading large-scale programs in cloud-first and hybrid environments.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.