Staff Security Operations & Vulnerability Management Engineer

At SolarWinds, we’re a people-first company. Our purpose is to enrich the lives of the people we serve-including our employees, customers, shareholders, partners, and communities. Join us in our mission to help customers accelerate business transformation with simple, powerful, and secure solutions.

The ideal candidate thrives in an innovative, fast-paced environment and is collaborative, accountable, ready, and empathetic. We’re looking for individuals who believe they can accomplish more as a team and create lasting growth for themselves and others. We hire based on attitude, competency, and commitment. Solarians are ready to advance our world-class solutions in a fast-paced environment and accept the challenge to lead with purpose. If you’re looking to build your career with an exceptional team, you’ve come to the right place. Join SolarWinds and grow with us!

We work in a hybrid mode 3+2, with a minimum of 3 days at the office (with mandatory Tuesdays and Wednesdays) and a maximum of 2 days at the home office.

The location of our office   is Holandská 873/6, Brno - Štýřice, 639 00.

We employ only via an employment contract - full-time employment   (HPP).

Overview

We’re looking for a Staff Security Engineer to set technical direction for Threat & Vulnerability Management (TVM) and reduce risk across the enterprise. This is a hands-on technical leadership role: you’ll turn noisy security telemetry into prioritized action, build scalable remediation capabilities, and influence Engineering, IT, Cloud, and Security teams without relying on direct authority.

You’ll evolve TVM beyond scanning and compliance into a measurable, continuous risk-reduction program spanning cloud, infrastructure, endpoints, applications, and software delivery.

What you’ll do

• Define the TVM strategy, roadmap, operating standards, and architecture for vulnerability discovery, prioritization, remediation, exceptions, and validation.
• Establish risk-based prioritization using exploitability, active exploitation and threat intelligence (including KEV and EPSS), reachability, asset criticality, and business context.
• Lead cross-team remediation of urgent and systemic exposures; help engineering teams balance risk, technical debt, and product reliability.
• Build integrations and automation across scanners, asset inventories, cloud platforms, CI/CD, ticketing, and security systems to improve ownership, routing, evidence collection, and validation.
• Translate emerging threats and MITRE ATT&CK techniques into exposure assessments, hunts, detections, and actionable guidance. Lead rapid zero-day assessments and serve as a Tier 3 escalation point or Incident Commander for major events.
• Define executive metrics that show risk reduction-such as remediation time for exploited flaws, mission-critical exposure, asset coverage, and overdue high-risk findings-and communicate clear decisions and trade-offs.
• Mentor engineers and establish repeatable practices that improve security outcomes across teams.

What you’ll bring

• Extensive experience in security engineering, SecOps, or vulnerability management, with Staff-level technical leadership and organization-wide influence.
• Deep hands-on experience with enterprise platforms such as Tenable, Qualys, or Rapid7, and a record of improving the full vulnerability lifecycle.
• Experience applying TVM across cloud, containers, endpoints, infrastructure, and CI/CD workflows; familiarity with AWS, Azure, and/or GCP.
• Strong risk judgment across exploitability, exposure, asset context, and threat intelligence; able to explain practical risk to engineers and executives.
• Ability to automate and analyze security data using Python, PowerShell, SQL, or equivalent, including APIs and data integrations.
• Practical knowledge of NIST CSF and MITRE ATT&CK, plus experience leading complex incident or vulnerability response.
• Demonstrated ability to influence across teams, mentor others, and build capabilities that scale beyond individual execution.

Preferred

Threat hunting, detection engineering, penetration testing, or exploit-analysis experience; certifications such as CISSP, GCIH, GEVA, CCSP, or a cloud security certification; or equivalent education and experience.

Why this role

Shape how the organization reduces vulnerability risk at scale. Measure success by exposure eliminated, stronger remediation practices, and improved readiness for emerging threats-not by the number of reports produced.

Our benefits:

• 25 days of vacation per year
• 3 sick days per year
• 10 study days per year
• 2 volunteering days per year
• 4 weeks’ holidays after 5-year tenure, Sabbatical Leave
• Up to 48 300CZK personal education budget per year
• Pension or life insurance matching donation up to 3% of the salary or 4000 CZK per month
• Cash allowance for meals of 95 CZK per working day
• Unlimited access to LinkedIn Learning
• English/Czech classes
• Multisport card
• Solarian Referral Program
• SolarWinds Appreciation Program
• Giving - Donation Matching
• Employee Assistance
• Competitive Race Reimbursement
• Breakfast on Wednesdays
• Fresh fruits and snacks on Mondays

SolarWinds is an Equal Employment Opportunity Employer. SolarWinds will consider all qualified applicants for employment without regard to race, color, religion, sex, age, national origin, sexual orientation, gender identity, marital status, disability, veteran status or any other characteristic protected by law.

All applications are treated in accordance with the SolarWinds Privacy Notice: https://www.solarwinds.com/applicant-privacy-notice