Senior Security Engineer – Vulnerability Management

About the role

Deriv is looking for a senior security engineer to own the full vulnerability lifecycle and build an AI‑driven engine that discovers, prioritises and remediates risk before it becomes an incident. This is a hands‑on technical leadership position focused on automation and measurable risk reduction across cloud, infrastructure, endpoints and network environments.

Key responsibilities

• Own end‑to‑end vulnerability management: discovery, enrichment, risk‑based prioritisation, remediation, validation and executive reporting.
• Lead and optimise Qualys VMDR (or equivalent) across AWS, GCP, Azure, Kubernetes, containers, macOS, Windows, Linux and office/network assets.
• Implement risk‑based scoring using CVSS, EPSS, CISA KEV and exploit intelligence, and define sustainable exception and risk‑acceptance processes.
• Design and enforce remediation SLAs, reducing MTTR and ageing vulnerabilities quarter over quarter.
• Integrate vulnerability data with CSPM, IAM, SIEM, EDR and cloud‑native controls, aligning with CIS, NIST, ISO 27001, PCI‑DSS and DORA.
• Automate intake, ticketing, assignment, tracking and validation workflows; use AI to enrich context and enable secure automated patching.
• Act as the technical authority for vulnerability management, mentor analysts and represent the function in audits and architecture reviews.

Required profile

• 8‑12+ years of cybersecurity experience with deep specialisation in vulnerability management.
• Expert‑level experience with Qualys VMDR or comparable platforms (Tenable, Rapid7).
• Strong understanding of exploit intelligence, risk scoring models and vulnerability lifecycle governance.
• Hands‑on experience with cloud security (AWS, GCP, Azure), CSPM integrations, endpoint patching and SIEM/EDR correlation.
• Proven ability to build dashboards and KPIs that influence executive decisions.
• Experience operating in regulated environments (ISO 27001, GDPR, PCI‑DSS, DORA).

Required skills

• Qualys VMDR (or Tenable/Rapid7)
• Python, Bash, API integrations
• AWS, GCP, Azure
• Kubernetes, container security
• macOS, Windows, Linux endpoint management
• SIEM and EDR platforms
• CVSS, EPSS, CISA KEV, exploit intelligence
• AI‑assisted prioritisation and automation