Jane Street
Cybersecurity Engineer - Vulnerability Management
About this role
Join our Cybersecurity team as a Vulnerability Management Engineer to build and scale our vulnerability management program. This hands-on role focuses on automating vulnerability discovery, triage, and remediation tracking while developing a deeper understanding of real security risks across our expanding infrastructure.
What you'll do
- Manage the vulnerability lifecycle from discovery and validation through remediation tracking and verification
- Prioritize and validate findings from scanning tools and threat intelligence based on actual exploitability rather than severity scores alone
- Drive automation across vulnerability management platforms and processes to scale operations
- Measure and improve scanning coverage across asset classes, including evaluating new scanning platforms
- Build dashboards and metrics to track coverage, SLAs, and remediation progress
- Integrate software inventory and SBOM data to map vulnerable components across the organization
What they're looking for
- Vulnerability management platform experience (Rapid7, Tenable, Qualys, or similar)
- Automation and scripting for security processes
- Data querying and pipeline development
- Threat modeling and risk assessment
- Version control and code review practices
- Asset inventory and scanning tools knowledge
- Clear technical communication across teams
- Cybersecurity fundamentals and threat landscape awareness
Opens the official application on the employer’s site. No login required.
Jane Street
Jane Street builds high-performance trading systems and critical infrastructure using primarily OCaml and Python to support distributed trading operations. The company is hiring software engineers, network engineers, and operations engineers at both intern and full-time levels to work on real production projects including trading systems, infrastructure optimization, routing protocols, and internal tooling.
- Website
- janestreet.com
Likely interview questions
- Walk us through your experience with vulnerability scanning platforms like Rapid7, Tenable, or Qualys. How have you used them to discover, triage, and track remediation in a substantial environment?
- Describe a time when you had to deprioritize a high-severity vulnerability finding. What factors did you consider, and how did you communicate that decision?