Keeper Security

Senior Vulnerability Engineer

Remote, US · Senior

Sponsorship not specified$53k-$800kDetected 97 days ago

AWSGCPAzureCloud PlatformsCI/CDData AnalysisCybersecurityPenetration TestingComplianceZero TrustCommunication

About the role

This is a 100% remote position, with an opportunity to work a hybrid schedule for candidates based in the El Dorado Hills, CA or Chicago, IL metro area.
About Keeper Keeper Security is one of the fastest-growing cybersecurity software companies that protects thousands of organizations and millions of people in over 150 countries.

Design and implement scalable vulnerability scanning and asset discovery solutions across multi-cloud and SaaS environments
Engineer and maintain integrations between vulnerability management tools and internal systems, including CI/CD platforms, ticketing systems, and source control tools
Develop risk-based prioritization models by correlating vulnerability data with threat intelligence and exploit activity
Build and maintain pipelines to integrate vulnerability scanning into CI/CD processes
Create dashboards and analytics to track vulnerability exposure, remediation SLAs, and risk trends
Partner with Engineering and DevOps teams to troubleshoot and remediate vulnerabilities in applications and infrastructure
Support compliance requirements, including FedRAMP, StateRAMP, SOC 2, ISO 27001, and NIST SP 800-53, through technical implementation and evidence generation
Document systems, workflows, and automation for repeatability and scale
Support the execution of red team exercises, penetration tests, and bug bounty programs in alignment with real-world threat scenarios
Coordinate and validate findings from internal and external testing activities, ensuring accuracy, severity calibration, and reproducibility

5-8+ years of experience in vulnerability management, security engineering, or related technical roles
Strong hands-on experience with vulnerability scanning tools, CVE/CVSS scoring, and exploit analysis
Strong understanding of cloud platforms, including AWS, GCP, and Azure, as well as modern application architectures
Ability to troubleshoot vulnerabilities across system, network, and application layers
Hands-on experience with penetration testing, red teaming, or bug bounty programs, including triage and validation of findings
Working knowledge of compliance frameworks such as NIST SP 800-53, CIS Controls, ISO 27001, and SOC 2
explicit consent where required

Certifications such as OSCP, GIAC, CISSP, or similar
Experience with data analytics and visualization tools such as Splunk or Elastic
Background in offensive security, red teaming, or exploit development
Experience working with bug bounty platforms and external researcher communities
Experience with asset inventory platforms, CMDBs, or cloud-native security tooling
Bachelor's degree in Cybersecurity, Computer Science, or a related field, or equivalent practical experience

Keeper's cybersecurity software is trusted by millions of people and thousands of organizations globally.
About Keeper
Keeper is a pioneer of zero-knowledge and zero-trust security built for any IT environment.
Learn why Keeper is trusted by leading organizations to defend against modern adversaries at KeeperSecurity.com.
About the Job
Applicant tracking, recruitment systems and assessment providers
Background verification vendors (post offer)
Recruitment agencies (where applicable)
International Transfers
Security

Medical, Dental & Vision (inclusive of domestic partnerships)
Employer Paid Life Insurance & Employee/Spouse/Child Supplemental life
Voluntary Short/Long Term Disability Insurance
A generous PTO plan that celebrates your commitment and seniority (including paid Bereavement/Jury Duty, etc)

equal opportunity employer and participant in the U.S. Federal E-Verify program.

This listing is sourced directly from Keeper Security's careers page and normalized into a canonical job model.