{"id":2829444,"url":"https://alion.io/job/backblaze-vulnerability-management-engineer","title":"Vulnerability Management Engineer","company":{"id":37551,"name":"Backblaze","domain":"backblaze.com","url":"https://alion.io/company/backblaze","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":95,"open_postings":11,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":62,"computed_at":"2026-10-20T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Colombia","Costa Rica","Mexico"],"countries":["CO","CR","MX"],"hiring_countries":["CO","MX","CR"],"hiring_countries_total":3,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"CVSS","optional":false},{"name":"LLM","optional":false},{"name":"MITRE D3FEND","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Red Teaming","optional":false},{"name":"STRIDE","optional":false}],"status":"live","first_seen_at":"2026-10-19T01:03:09Z","employer_posted_date":"2026-10-19","last_verified_at":"2026-10-20T04:07:02Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"About Backblaze\nBackblaze is the object storage leader in the open cloud movement, fueling customer success with cloud storage built purposefully to unlock budgets, unburden administrators, and unleash innovators. Together with our partners, we’re helping customers break free from the restrictive, overpriced legacy solutions that hold them back, and blaze forward with the full power of the open cloud in their hands.\nFounded in 2007, we scaled the business with less than $3 million in outside funding until 2021, when we did a traditional IPO on the Nasdaq stock exchange. Today, Backblaze generates over $136M ARR and is the leading specialized storage cloud, managing over three billion gigabytes of data storage for 500K+ customers in 175+ countries, including businesses, developers, IT professionals, and individuals.\nBut while there is a lot to celebrate in our past, there is almost as much opportunity ahead of us. We’re seeking a Vulnerability Management Engineer to join our team!\nAbout the Role\nThe Vulnerability Management Engineer drives risk-based vulnerability and exposure management across infrastructure, applications, cloud services, endpoints, and software dependencies. The role combines vulnerability data, asset and configuration intelligence, application-security testing, threat intelligence, and AI-assisted analysis to determine whether vulnerabilities are reachable, exploitable, and likely to represent an imminent organizational threat.\nKey Responsibilities\nCorrelate threat intelligence and vulnerability findings with asset inventory, software configuration, system configuration, application testing, network exposure, ownership, and business criticality.\nAssess exploitability and reachability rather than relying on vulnerability severity alone.\nIncorporate exploit prediction, known exploitation, open-source threat intelligence, adversary activity, and environmental context into prioritization.\nDetermine whether exposure requires immediate incident response or remediation under established operational objectives.\nUse AI-assisted workflows to ingest and correlate vulnerability intelligence against the organization's actual technology configuration while independently validating conclusions.\nPartner with Red Team to validate practical exploitability of significant vulnerabilities.\nIdentify compensating controls such as configuration changes, access restrictions, segmentation, or filtering when immediate patching is impractical.\nAutomate vulnerability ingestion, analysis, prioritization, remediation tracking, mitigation, and verification where appropriate.\nQualifications\nExperience with enterprise vulnerability or exposure management.\nStrong understanding of infrastructure, applications, cloud, containers, networking, and software dependencies.\nExperience interpreting vulnerability intelligence and assessing practical exploitability.\nKnowledge of risk-based prioritization techniques including CVSS, exploit prediction, known-exploitation intelligence, and environmental context.\nExperience correlating vulnerability, asset, configuration, SAST, DAST, SCA, endpoint, or related security data.\nExperience with scripting, automation, or data analysis.\nFamiliarity with continuous exposure management, attack-path analysis, AI-assisted analysis, or automated mitigation is preferred.\nStrong understanding of OWASP Top 10, MITRE ATT&CK, MITRE D3FEND, and STRIDE.\nFamiliarity with OWASP Top 10 for LLM, OWASP Top 10 for Agentic Applications, MITRE ATLAS and MAESTRO.\nAt this point, we hope you're feeling excited about the job description you're reading. Even if you don't meet every requirement, we still encourage you to apply. Learning, developing, and growing are key parts of our culture. We're eager to meet people who believe in our mission and can contribute to our team in various ways. We want people to feel comfortable expressing their true selves and to come, stay, and do their best work here.\nAt Backblaze, we value being fair and good to our customers, partners, and employees. That’s why diversity, equity, and inclusion are at the core of our values. We are committed to fostering a workforce where all employees feel a sense of belonging regardless of race, ethnicity, nationality, gender, sexual orientation, age, religion, socio-economic status, ability, veteran status, and education. We believe that our dedication to cultivating a diverse workspace not only allows us to better serve our customers in over 175 countries, but further reinforces our commitment to doing the right thing. We are proud to be an Equal Opportunity Employer.\nTo understand more about the data we collect and process as part of your application, please view our Backblaze Employee Privacy Notice.","description_format":"text","description_chars":4748,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"Colombia","iso":"CO","kind":"country"},{"name":"Mexico","iso":"MX","kind":"country"},{"name":"Costa Rica","iso":"CR","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Information Security","Vulnerability Management","Backup & Disaster Recovery"],"lifecycle":[{"event":"open","at":"2026-10-19T01:51:09Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":62,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/backblaze-vulnerability-management-engineer","json_url":"https://alion.io/job/backblaze-vulnerability-management-engineer.json","meta":{"generated_at":"2026-10-20T08:08:29Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8680,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":37551},"rest":"https://alion.io/mcp/rest/get_company?id=37551"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbackblaze-vulnerability-management-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbackblaze-vulnerability-management-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbackblaze-vulnerability-management-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/backblaze-vulnerability-management-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbackblaze-vulnerability-management-engineer"}]}