Vulnerability Engineer

About the role

Domino’s Security team protects a platform used by highly regulated organisations. The Vulnerability Engineer will scale the vulnerability management function, turning a growing workload into faster, more consistent risk assessments and reliable scanning pipelines.

Key responsibilities

• Own first‑pass CVSS scoring and exploitability analysis to close the SLA gap between detection and answer.
• Reproduce and confirm customer‑reported and pen‑test findings before they reach engineering, ensuring fix priority reflects real exploitability.
• Maintain and troubleshoot SAST/DAST and other vulnerability scanning automations, keeping data clean and reliable.
• Develop or run proof‑of‑concept exploits for selected CVEs to bring validated risk into prioritisation discussions.
• Partner with engineering teams to translate validated findings into actionable remediation plans.

Required profile

• Hands‑on experience managing vulnerabilities for a large SaaS product, covering OS, container, and dependency exposure.
• Proven track record triaging and tracking CVEs, reading scan reports, prioritising by severity, and following issues through to resolution.
• Experience reproducing and validating reported vulnerabilities, including pen‑test findings.
• Ability to work closely with engineering to communicate risk and drive remediation.

Required skills

• CVSS scoring and exploitability analysis.
• SAST and DAST tooling.
• Container security and OS‑level vulnerability assessment.
• Vulnerability scanning automation and troubleshooting.
• Exploit development / proof‑of‑concept creation.