Vulnerability Management Analyst

About The Role

We're partnering with world-leading AI research labs to build smarter, more capable AI systems — and we need security professionals who know what real-world vulnerability management actually looks like. This isn't a theoretical exercise. You'll work with realistic scenarios drawn from how security teams actually discover, prioritize, and remediate risk across modern infrastructure. Your expertise will directly shape how AI understands and reasons about cybersecurity — making these systems more accurate, more trustworthy, and more useful for security practitioners everywhere.

What You'll Do

• Analyze vulnerability reports, CVEs, and exposure scenarios across infrastructure and application environments
• Classify severity, exploitability, and business impact using real-world security reasoning
• Evaluate patching, mitigation, and remediation decision-making scenarios for accuracy and practicality
• Generate, label, and validate realistic security data used to train and evaluate AI models
• Apply your hands-on experience to help AI distinguish between theoretical risk and what actually matters in production

Who You Are

• 2+ years of experience in vulnerability management, security operations, or infrastructure security
• Familiar with CVEs, vulnerability scanners, patching workflows, and risk prioritization frameworks (CVSS, EPSS, etc.)
• Understand the real-world tradeoffs between scanner output and actual exploitability
• Analytical and structured in your thinking — you can explain why a risk matters, not just that it does
• Self-motivated and comfortable working independently in an asynchronous environment

Nice to Have

• Experience with exposure management platforms (Tenable, Qualys, Rapid7, Wiz, etc.)
• Familiarity with cloud or container security vulnerability workflows
• Background in SOC, red team, or penetration testing that informs your remediation thinking
• Prior experience contributing to AI training, data labeling, or technical content creation