{"id":3884918,"url":"https://alion.io/job/recursion-pharmaceuticals-senior-engineer-exposure-vulnerability-management","title":"Senior Engineer, Exposure & Vulnerability Management","company":{"id":48181,"name":"Recursion Pharmaceuticals","domain":"recursion.com","url":"https://alion.io/company/recursion-pharmaceuticals","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":75,"open_postings":3,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":32,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"Configuration Management","optional":false},{"name":"CVSS","optional":false},{"name":"EPSS","optional":false},{"name":"Function Calling","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Java","optional":false},{"name":"KEV","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM","optional":false},{"name":"Multi-Agent Systems","optional":false},{"name":"Python","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false},{"name":"Multimodal AI","optional":true}],"status":"live","first_seen_at":"2026-11-06T18:55:18Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-08T20:47:11Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Your work will change lives. Including your own. \n\nThe Impact You’ll Make\nHelp shift Recursion from periodic scans to continuous, risk-driven exposure management. You’ll build multi-agent systems that take vulnerabilities from discovery to verified closure, with approval gates, audit trails, and rollback built in. You’ll replace static CVSS scores with prioritization based on reachability, attack paths, business criticality, and live exploit intelligence, so engineering teams can focus on what’s actually exploitable. By integrating remediation into ticketing and CI/CD and partnering with Engineering and IT to make secure-by-default the norm, you’ll shrink our attack surface and speed up fixes where risk is highest, helping Recursion keep decoding biology with confidence.\nIn this role, you will:\nDesign and deploy multi-agent systems that take an exposure from discovery to closure: analyzing it from the outside in, mapping dependencies from the inside out, generating the patch or Infrastructure-as-Code (IaC) update, and validating the result. Build in approval gates, audit trails, and rollback so every automated change gets the level of review its risk calls for.\nMove prioritization beyond static CVSS scores by building engines that rank exposures on real-time reachability, attack-path context, business criticality, and live exploit intelligence.\nCut through alert noise with automated verification that separates theoretical flaws from actively exploitable conditions, so engineering and DevOps teams can focus on the issues that matter.\nDrive our Continuous Threat Exposure Management (CTEM) strategy, shifting the organization from periodic scans to a proactive, around-the-clock security posture across products, platforms, cloud and on-premise infrastructure, and corporate applications.\nAssess the current state of our exposure and vulnerability management program and revamp the strategy to accelerate key business outcomes and support our broader zero-trust security approach.\nArchitect cloud-native discovery, asset-inventory, and remediation workflows, and integrate them with ticketing, CI/CD, and configuration management so fixes reach owners and ship without manual hand-offs.\nPartner with Engineering and IT to embed secure-by-default practices into how products and applications are built, deployed, and patched, with remediation timelines matched to real risk.\nDefine KPIs, KCIs, and KRIs (for example mean time to remediate, exploitable-exposure backlog, and coverage of critical assets) that show how well controls are working and guide continuous improvement.\nSupport regulatory compliance by working with partner teams to design exposure and vulnerability controls that meet standards such as SOC2. \nThe Team You’ll Join \nYou will join a growing Information Security team at Recursion, focused on enabling Recursion to decode biology by providing world class secure technology services that are designed and fit for purpose. You'll collaborate with your teammates and across departments to ensure that IAM systems support the organization's broader business objectives while maintaining the highest standards of security.\nThe Experience You’ll Need\nBachelor's or Master's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.\n7+ years of experience in vulnerability management, exposure management, or related information security domains, including leading large-scale programs from strategy through execution in cloud-first and hybrid environments.\nDeep understanding of security principles, with a track record of turning vulnerability data into prioritized, owned, and verified remediation.\nHands-on experience building or deploying AI/LLM-based agents or multi-agent systems for security or engineering workflows, including orchestration, tool use, and evaluation.\nWorking knowledge of approval workflows, audit logging, and rollback controls for automated remediation, and of the risks of agent-driven changes.\nProficiency in one or more programming languages (for example Python, Go, Java) and strong scripting skills for automation and integration.\nExpert-level experience with leading vulnerability and exposure management platforms (for example Tenable, Qualys, Rapid7, or equivalent) and with CTEM, attack surface management, and attack-path analysis tooling.\nStrong command of risk-based prioritization: CVSS, EPSS, CISA KEV, reachability analysis, and threat intelligence feeds.\nExperience with cloud platforms (AWS, Azure, GCP), container and Kubernetes security, and Infrastructure-as-Code (Terraform, CloudFormation) for automated remediation.\nExperience with CI/CD pipelines, SCA/SAST tooling, and software supply chain security, including SBOMs and dependency mapping.\nKnowledge of operating systems (UNIX/Linux, macOS, Windows), networking, and database management systems.\nExperience with risk management, ensuring solutions align with organizational risk tolerance and compliance requirements (SOC2, GxP, or similar).\nRelevant security certifications (for example CISSP, OSCP, GWAPT) are highly desirable.\nWorking Location & Compensation:\nThis is a remote position based in the United States. We ask that remote employees commit to regular on-site visits for routine work and departmental events.\nAt Recursion, we believe that every employee should be compensated fairly. Based on the skills, experience, and qualifications needed for this role, the estimated annual base salary range is: $134,200-$180,600. In addition to base salary, this role is eligible for an annual bonus, equity compensation, and a comprehensive benefits package.\n#LI-EP1 \nThe Values We Hope You Share:\nWe act boldly with integrity. We are unconstrained in our thinking, take calculated risks, and push boundaries, but never at the expense of ethics, science, or trust. \nWe care deeply and engage directly. Caring means holding a deep sense of responsibility and respect - showing up, speaking honestly, and taking action.\nWe learn actively and adapt rapidly. Progress comes from doing. We experiment, test, and refine, embracing iteration over perfection.\nWe move with urgency because patients are waiting. Speed isn’t about rushing but about moving the needle every day.\nWe take ownership and accountability. Through ownership and accountability, we enable trust and autonomy-leaders take accountability for decisive action, and teams own outcomes together. \nWe are One Recursion. True cross-functional collaboration is about trust, clarity, humility, and impact. Through sharing, we can be greater than the sum of our individual capabilities.\nOur values underpin the employee experience at Recursion. They are the character and personality of the company demonstrated through how we communicate, support one another, spend our time, make decisions, and celebrate collectively.\nMore About Recursion\nRecursion (NASDAQ: RXRX) is a clinical-stage TechBio company decoding biology to radically improve lives. Recursion is advancing a portfolio of differentiated investigational medicines across its wholly owned and partnered pipeline in oncology, rare disease, neuroscience, immunology, and other therapeutic areas with significant unmet need. Enabling its mission is the Recursion OS, an AI-native, end-to-end drug discovery and development platform integrating biology, chemistry, and clinical development into a unified intelligence system. Powered by proprietary multimodal data, purpose-built AI models, and bilingual teams fluent in both science and AI, the Recursion OS is designed to translate complex science into medicines that matter - faster, better, and at scale - for patients who are waiting.\nRecursion’s platform infrastructure is anchored in Salt Lake City, Utah and Milton Park, Oxfordshire, where its automated biology and chemistry laboratories generate proprietary data at industrial scale. Recursion also maintains offices in New York, Montréal, and London, three global hubs for talent and leadership at the intersection of AI and scientific innovation. Learn more at www.recursion.com, or connect on X and LinkedIn.\nRecursion is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other characteristic protected under applicable federal, state, local, or provincial human rights legislation. \nAccommodations are available on request for candidates taking part in all aspects of the selection process.\n\nRecursion leverages AI in our hiring process. We use Greenhouse's Talent Matching AI technology feature to help review applications against the skills and experience we've identified as important for this role. It analyzes your resume and application responses to assess how closely your qualifications match our criteria - but all decisions are made by our human recruiters and hiring managers, including whether to move to the next phase of review. Talent Matching does not automatically advance or reject any candidate. By submitting your application, you acknowledge that you have been informed about and consent to this use of the Talent Matching tool in our review process. Please refer to our Recursion Privacy Policy at https://www.recursion.com/privacy-notice/ for more information about our processing of personal data and your rights. \nRecruitment & Staffing Agencies: Recursion Pharmaceuticals and its affiliate companies do not accept resumes from any source other than candidates. The submission of resumes by recruitment or staffing agencies to Recursion or its employees is strictly prohibited unless contacted directly by Recursion’s internal Talent Acquisition team. Any resume submitted by an agency in the absence of a signed agreement will automatically become the property of Recursion, and Recursion will not owe any referral or other fees. Our team will communicate directly with candidates who are not represented by an agent or intermediary unless otherwise agreed to prior to interviewing for the job.","description_format":"text","description_chars":10127,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Information Security","Vulnerability Management","Biotechnology"],"lifecycle":[{"event":"open","at":"2026-11-06T19:17:58Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 3 · green card filings: 3","filings_12m":3,"filings_prev_12m":6,"green_card_filings_12m":3,"median_offered_wage_usd":94167,"route":null,"cap_exempt":false,"checked_at":"2026-11-08T10:45:15+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":32,"reasons":["conf:1","win:early"],"computed_at":"2026-11-08T05:47:12Z"},"pay":null,"html_url":"https://alion.io/job/recursion-pharmaceuticals-senior-engineer-exposure-vulnerability-management","json_url":"https://alion.io/job/recursion-pharmaceuticals-senior-engineer-exposure-vulnerability-management.json","meta":{"generated_at":"2026-11-08T22:20:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":46659,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":48181},"rest":"https://alion.io/mcp/rest/get_company?id=48181"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frecursion-pharmaceuticals-senior-engineer-exposure-vulnerability-management"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frecursion-pharmaceuticals-senior-engineer-exposure-vulnerability-management"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frecursion-pharmaceuticals-senior-engineer-exposure-vulnerability-management"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/recursion-pharmaceuticals-senior-engineer-exposure-vulnerability-management\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frecursion-pharmaceuticals-senior-engineer-exposure-vulnerability-management"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3884918}},{"tool":"search_jobs","arguments":{"company":"recursion.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3884918},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}