Staff Security Operations & Vulnerability Management Engineer

We work in a hybrid mode 3+2, with a minimum of 3 days at the office (with mandatory Tuesdays and Wednesdays) and a maximum of 2 days at the home office.

The location of our office is Holandská 873/6, Brno – Štýřice, 639 00.

We employ only via an employment contract – full-time employment (HPP).

Overview
We’re looking for a Staff Security Engineer to set technical direction for Threat & Vulnerability Management (TVM) and reduce risk across the enterprise. This is a hands-on technical leadership role: you’ll turn noisy security telemetry into prioritized action, build scalable remediation capabilities, and influence Engineering, IT, Cloud, and Security teams without relying on direct authority.
You’ll evolve TVM beyond scanning and compliance into a measurable, continuous risk-reduction program spanning cloud, infrastructure, endpoints, applications, and software delivery.

What you’ll do

• Define the TVM strategy, roadmap, operating standards, and architecture for vulnerability discovery, prioritization, remediation, exceptions, and validation.
• Establish risk-based prioritization using exploitability, active exploitation and threat intelligence (including KEV and EPSS), reachability, asset criticality, and business context.
• Lead cross-team remediation of urgent and systemic exposures; help engineering teams balance risk, technical debt, and product reliability.
• Build integrations and automation across scanners, asset inventories, cloud platforms, CI/CD, ticketing, and security systems to improve ownership, routing, evidence collection, and validation.
• Translate emerging threats and MITRE ATT&CK techniques into exposure assessments, hunts, detections, and actionable guidance. Lead rapid zero-day assessments and serve as a Tier 3 escalation point or Incident Commander for major events.
• Define executive metrics that show risk reduction—such as remediation time for exploited flaws, mission-critical exposure, asset coverage, and overdue high-risk findings—and communicate clear decisions and trade-offs.
• Mentor engineers and establish repeatable practices that improve security outcomes across teams.

What you’ll bring

• Extensive experience in security engineering, SecOps, or vulnerability management, with Staff-level technical leadership and organization-wide influence.
• Deep hands-on experience with enterprise platforms such as Tenable, Qualys, or Rapid7, and a record of improving the full vulnerability lifecycle.
• Experience applying TVM across cloud, containers, endpoints, infrastructure, and CI/CD workflows; familiarity with AWS, Azure, and/or GCP.
• Strong risk judgment across exploitability, exposure, asset context, and threat intelligence; able to explain practical risk to engineers and executives.
• Ability to automate and analyze security data using Python, PowerShell, SQL, or equivalent, including APIs and data integrations.
• Practical knowledge of NIST CSF and MITRE ATT&CK, plus experience leading complex incident or vulnerability response.
• Demonstrated ability to influence across teams, mentor others, and build capabilities that scale beyond individual execution.

Preferred
Threat hunting, detection engineering, penetration testing, or exploit-analysis experience; certifications such as CISSP, GCIH, GEVA, CCSP, or a cloud security certification; or equivalent education and experience.

Why this role
Shape how the organization reduces vulnerability risk at scale. Measure success by exposure eliminated, stronger remediation practices, and improved readiness for emerging threats—not by the number of reports produced.

Our benefits:

• 25 days of vacation per year
• 3 sick days per year
• 10 study days per year
• 2 volunteering days per year
• 4 weeks’ holidays after 5-year tenure, Sabbatical Leave
• Up to 48 300CZK personal education budget per year
• Pension or life insurance matching donation up to 3% of the salary or 4000 CZK per month
• Cash allowance for meals of 95 CZK per working day
• Unlimited access to LinkedIn Learning
• English/Czech classes
• Multisport card
• Solarian Referral Program
• SolarWinds Appreciation Program
• Giving – Donation Matching
• Employee Assistance
• Competitive Race Reimbursement
• Breakfast on Wednesdays
• Fresh fruits and snacks on Mondays