{"id":123652,"url":"https://alion.io/job/domino-vulnerability-engineer","title":"Vulnerability Engineer","company":{"id":27268,"name":"Domino Data Lab","domain":"domino.ai","url":"https://alion.io/company/domino-data-lab","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["India"],"countries":["IN"],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Burp Suite","optional":false},{"name":"CVSS","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PoC Library","optional":false},{"name":"Prisma Cloud","optional":false},{"name":"Python","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"Snowflake","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Trivy","optional":false}],"status":"live","first_seen_at":"2026-08-05T18:06:01Z","employer_posted_date":"2026-09-15","last_verified_at":"2026-10-17T13:01:31Z","board_verified":true,"closed_at":null,"days_open":72,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":72},"description":"Who we are\nAt Domino, we build solutions that help the largest, highly regulated organizations adopt AI to accelerate mission-critical use cases. Our platform integrates a streamlined model and app development environment, advanced model, agent, and app hosting capabilities, and novel governance capabilities providing regulator-ready AI at scale. Our customers - like Johnson & Johnson, GSK, Bristol Myers, UBS, FINRA and the US Navy - are using our software to solve some of the most important challenges in the world, such as developing new medicines, securing our financial markets, or protecting our country. Backed by Sequoia Capital, Coatue Management, NVIDIA, Snowflake and other leading investors, we have been in business for over a decade but are still a small team operating with the spirit of a startup. In the world of AI today, we believe that the future is still being invented - and we want to be the ones building it. For more information, visit www.domino.ai\nWhat we are building\nDomino's Security team safeguards a platform trusted by some of the most regulated organizations in the world, across financial services, pharma, government, and defense. Vulnerability Management is where that trust gets tested day to day: finding, triaging, and closing out risk across our OS, container, and dependency surface, and giving customers a clear, defensible answer when they ask how exposed they are. This role joins that function as it scales, working closely with our Staff Security Engineer to turn a fast-growing vulnerability workload into faster, more consistent risk assessments.\nWhat your impact will be\nIn your first year, your impact will be:\nFaster, more consistent Vulnerability Risk Assessments. You'll own first-pass CVSS scoring and exploitability analysis, closing the SLA gap between finding and answer\nValidated, trustworthy triage. You'll reproduce and confirm customer-reported and pen-test findings before they reach Engineering, so fix priority reflects real exploitability, not just scanner severity\nReliable scanning pipelines. You'll keep SAST/DAST and vulnerability scanning automations running, troubleshooting failures and tuning configs so the data everyone relies on stays clean\nReal partnership with Engineering. You'll build or run PoC exploits on select CVEs, bringing validated risk, not just findings, into prioritization conversations\nMore capacity for the function. You'll free up our Staff Security Engineer to focus on program-level improvement instead of carrying all of vulnerability management's day-to-day load\nWhat we look for in this role\nHands-on experience managing vulnerabilities for a large SaaS product, across OS, container, and dependency exposure\nA track record triaging and tracking CVEs for a SaaS or containerized product: reading scan reports, prioritizing by severity, and following through to resolution\nExperience reproducing and validating reported vulnerabilities, whether from customer disclosures or pen test findings, not just logging them\nTime spent with vulnerability scanning tools such as Prisma Cloud/Twistlock, JFrog, or Trivy, including reconciling findings across tools\nComfort building or maintaining SAST/DAST pipeline automation, and triaging what the scans turn up\nExperience partnering with Engineering to get fixes prioritized and shipped, not just reported\nBackground in a highly regulated environment or modern software company, ideally one that moves at startup or scale-up speed\nStrong scripting ability, Python preferred\nWorking knowledge of CVSS v3.1/v4.0 scoring and the judgment to assess risk, not just report it\nExploit development or PoC skills to validate real-world exploitability of CVEs, using tools like Burp Suite\nFamiliarity with OWASP Top 10 and testing methodology\nWorking knowledge of containers and Kubernetes, plus core Linux, AWS, and networking fundamentals\nBasic understanding of authentication/authorization concepts (tokens, session handling, auth bypass patterns) and API security fundamentals\nBasic threat modeling: thinking in attack paths, not just isolated severity scores\nClear communication, comfortable navigating risk conversations with Engineering and customers, including drafting risk statements a non-technical audience will actually read\nComfort operating with ambiguity, since not every finding arrives with a clean severity or fix path\nNice to have:\nOSWA, OSWE, or a similar offensive security certification (e.g. GWAPT, GPEN)\nFamiliarity with Airflow and Snowflake\nWhat we value\nWe value a growth mindset. High-performing creative individuals who dig into problems and see the opportunities for success\nWe believe in individuals who seek truth and speak the truth and can be their whole selves at work\nWe value all of you that believe improving is always possible At Domino Everything is a work in progress - we can do better at everything\nWe emphasize an environment of teaching and learning to equip employees with the tools needed to be successful in their function and the company\nWe strongly believe in the value of growing a diverse team and encourage people of all backgrounds, genders, ethnicities, abilities, and sexual orientations to apply","description_format":"text","description_chars":5188,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Machine Learning","Data Science & Notebook Platforms","MLOps"],"lifecycle":[{"event":"open","at":"2026-08-05T18:06:01Z"}],"visa":[],"liveness":{"score":31,"band":"fade","label":"Fading","p_open":1,"p_active":0.704,"p_room":0.44,"age_days":72,"expected_fill_days":71,"reasons":["conf:2","velocity","win:tail","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/domino-vulnerability-engineer","json_url":"https://alion.io/job/domino-vulnerability-engineer.json","meta":{"generated_at":"2026-10-17T15:38:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21179,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":27268},"rest":"https://alion.io/mcp/rest/get_company?id=27268"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdomino-vulnerability-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdomino-vulnerability-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdomino-vulnerability-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/domino-vulnerability-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdomino-vulnerability-engineer"}]}