Skip to content

Cybersecurity Engineer - Vulnerability Management

Jane Street
🇺🇸New YorkSeniorFull-timePosted June 17, 2026

About the Role

We're looking for a Cybersecurity Engineer to help mature our vulnerability management program. You'll join our Cybersecurity team, a skilled group of programmers and security experts dedicated to keeping the firm safe.

This is a hands-on, build-heavy role focused on vulnerability management with a broader perspective across cybersecurity. You'll work on supporting the vulnerability management lifecycle end to end—from discovery and validation through triage, assignment, remediation tracking, and verification. Your responsibilities include:

  • Reviewing findings from automated scanning tools, threat intel, and security advisories, prioritizing based on real exploitability and exposure
  • Validating and deduplicating findings across sources and routing work to appropriate teams
  • Measuring scanning coverage and data quality to identify gaps and stale scans
  • Driving automation across vulnerability management tooling and processes
  • Broadening scanning coverage across asset classes and evaluating scanning platforms
  • Integrating software inventory and SBOM data to track vulnerable components across the organization
  • Building dashboards and metrics to measure coverage, SLAs, and progress

Requirements

  • You automate rather than do things by hand, keep your code and configs in version control by default, work comfortably under code review, and care about leaving things maintainable
  • You’re comfortable working with data, querying and shaping it, and building and debugging the data pipelines and integrations that stitch messy, inconsistent inputs into something dependable
  • You have hands-on vulnerability management experience in a substantial environment, including experience with an automated scanning platform such as Rapid7, Tenable, or Qualys, and an understanding of how scanning, asset inventory, and remediation tracking fit together
  • You’re a measured responder who reasons about trade-offs and context, understands threat modeling, and knows not every finding deserves the same urgency
  • You follow cybersecurity developments and can tell the difference between an interesting hack and what matters day-to-day
  • You understand and practice good personal cybersecurity hygiene, and can talk to others about it
  • You’re a clear communicator across audiences, who writes things down so others can follow
  • You have a positive and collaborative attitude; You understand that a key component of cybersecurity is bringing others along with you on the journey
  • A strong technical foundation, isn't afraid to build something themselves, has good judgment about what actually matters, and can explain the "why" behind a risk and its mitigation