IT Security Engineer IV

Russell Tobin•Atlanta, GA

1d•Remote

About The Position

The IT Security Engineer IV will design and maintain security automation that aggregates and enriches vulnerability data from sources including attack surface management, endpoint security, and continuous watchlists. The role focuses on automating triage, risk scoring, routing, ticketing, remediation support, and enforcement of the Security Defect Framework. The engineer will also analyze defect trends and develop programmatic prevention strategies to reduce inbound vulnerability volume. This is a 100% remote role with a duration of six or more months and possible extension.

Requirements

High proficiency in Python, Go, or similar languages for building robust automation, RESTful API integrations, and data manipulation scripts.
Deep understanding of modern Vulnerability & Defect Management, Attack Surface Management (ASM), and Cloud Security Posture Management (CSPM) in enterprise environments.
Strong working knowledge of exploitability frameworks, including CVSS, EPSS, and CISA KEV, and how to apply them programmatically to asset inventories.
Experience building systems that correlate and sanitize data from disparate security platforms into a unified risk model.
A builder mindset and proven track record of converting manual operational workflows into scalable code.
Bachelor’s degree in an IT-related or Engineering field.

Responsibilities

Design, build, and maintain automated vulnerability ingestion and enrichment pipelines that aggregate data from ASM, EXM, endpoint/CrowdStrike, and continuous watchlists.
Develop automated gate-routing and risk-scoring mechanisms to reduce manual triage and accelerate defect prioritization.
Partner with Threat Intelligence and Offensive Security to integrate adversary-awareness metrics, including KEV and EPSS, into automated ticketing and residual risk ledgers.
Support engineering automated remediation workflows, such as auto-PR generation and guardrail enforcement, to scale defect resolution across builder teams.
Programmatically enforce the Security Defect Framework so automated tickets include accurate priority, automated attribution, and clear definitions of done without manual review.
Analyze vulnerability volume trends, such as top ACP policy violations, and engineer programmatic prevention strategies to reduce inbound defect volume.