Senior Security Engineer – Vulnerability Management

About the role

Deriv is looking for a senior security engineer to design and operate an automated vulnerability‑management engine. You will act as the technical lead, thinking like an attacker to prioritize risk and turning remediation into a measurable, automated process.

Key responsibilities

• Own the full vulnerability lifecycle – discovery, enrichment, risk‑based prioritization, remediation, validation and executive reporting.
• Build AI‑driven prioritization models and automated workflows that reduce exposure windows across cloud, container and endpoint environments.
• Integrate vulnerability data from AWS, GCP, Azure, Kubernetes, containers, endpoints and network infrastructure into a unified remediation pipeline.
• Replace manual scan‑to‑spreadsheet processes with scalable, intelligence‑led automation.
• Collaborate with engineering and operations teams to ensure timely remediation of high‑risk findings.
• Provide clear, data‑driven reports to senior leadership and regulators.

Required profile

• Proven experience leading vulnerability‑management programs at a senior level.
• Strong attacker mindset with ability to prioritize threats beyond simple CVSS scores.
• Track record of building automation‑first security solutions at global scale.
• Excellent communication skills to translate technical risk into business impact.
• Hands‑on experience in cloud (AWS, GCP, Azure) and container orchestration (Kubernetes).

Required skills

• AWS
• GCP
• Azure
• Kubernetes
• Containers
• Endpoints
• Network infrastructure
• Qualys