{"id":4261030,"url":"https://alion.io/job/trellix-vulnerability-management-engineer-ai-automation","title":"Vulnerability Management Engineer (AI Automation)","company":{"id":42946,"name":"Trellix","domain":"trellix.com","url":"https://alion.io/company/trellix","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":84,"open_postings":17,"ghost_share":0,"stale_share":0.588,"repost_share":0.059,"time_to_fill_p50_days":36,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["India"],"countries":["IN"],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Anthropic","optional":false},{"name":"AutoGen","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"CrewAI","optional":false},{"name":"Crowdstrike","optional":false},{"name":"CVSS","optional":false},{"name":"Docker","optional":false},{"name":"EPSS","optional":false},{"name":"GCP","optional":false},{"name":"GraphQL","optional":false},{"name":"Jira","optional":false},{"name":"KEV","optional":false},{"name":"Kubernetes","optional":false},{"name":"LangChain","optional":false},{"name":"LangGraph","optional":false},{"name":"LLM","optional":false},{"name":"Microsoft Teams","optional":false},{"name":"OpenAI","optional":false},{"name":"Python","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"RAG","optional":false},{"name":"Rest API","optional":false},{"name":"ServiceNow","optional":false},{"name":"Slack","optional":false},{"name":"Snyk","optional":false},{"name":"Wiz","optional":false}],"status":"live","first_seen_at":"2026-11-13T15:25:51Z","employer_posted_date":"2026-11-13","last_verified_at":"2026-11-13T15:25:51Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Job Title:\nVulnerability Management Engineer (AI Automation)About Trellix \nTrellix is a global cybersecurity leader helping organizations build cyber resilience for the AI era. Combining AI-native security, operational threat intelligence, and automated detection and response, Trellix provides defense-grade protection at machine speed across on-premises, air-gapped, operational technology, hybrid, and cloud environments. Trellix helps customers anticipate threats, scale effective security operations, maintain business continuity, and adapt their security posture for the modern threat landscape. Working with a broad partner ecosystem and global intelligence collaborators, Trellix helps strengthen the collective defense against cybercriminals and state-sponsored attacks. At Trellix, we empower professionals at all career stages to expand their technical expertise, lead strategic initiatives, and make a tangible global impact. Whether you are an industry pioneer or an emerging specialist, Trellix provides the tools and opportunities to enhance and expand your skill set. Join our mission to scale AI-driven cyber defense alongside an AI-accelerated threat landscape, and help build a safer, more resilient future. More at https://trellix.com.\nRole Overview:\nWe are looking for strategic, hands-on Security Engineer to drive end-to-end vulnerability management, governance, and risk-based prioritization across hybrid, cloud, and containerized environments in alignment with NIST SSDF, EU CRA, and IEC standards. The role focuses on engineering autonomous AI agents to automate asset discovery, finding validation, exploitability analysis, ticket orchestration, and zero-day response. Candidates will lead cross-functional remediation with IT and DevOps teams, streamline exception workflows, and deliver executive-level risk reporting and metrics.About Role:\nDirect continuous asset discovery, vulnerability assessment, remediation verification, and executive reporting across hybrid cloud, container, and application ecosystems.\nContextualize vulnerability severity (CVSS) using real-world threat intelligence (EPSS, CISA KEV) and business criticality. Spearhead rapid response protocols for critical zero-day vulnerabilities, implementing interim compensating controls and formal risk-acceptance workflows as required.\nArchitect and deploy autonomous AI agents to automate asset discovery, CMDB reconciliation, false-positive elimination, exploitability analysis, intelligent ticket routing, SLA breach escalations, and executive reporting.\nEstablish and enforce program governance, remediation SLAs, and exception management frameworks aligned with NIST SSDF, EU CRA, and IEC standards.\nDefine, track, and present key performance indicators (scan coverage, MTTR, SLA adherence, and vulnerability aging) to senior leadership. Partner with and mentor IT Operations, DevOps, and Software Engineering teams to accelerate remediation and embed security-by-design practices.\nAbout You:\n5+ years in Information Security with a strong focus on Vulnerability Management, Application Security, or Cloud Security.\nExtensive hands-on expertise with industry-leading VM, CNAPP, and AppSec solutions-including Tenable, Wiz, Qualys, CrowdStrike, or Snyk-with proven ability to programmatically orchestrate scans, ingest telemetry, and validate remediation.\nDemonstrated experience designing and deploying autonomous AI agents and multi-step LLM workflows using frameworks such as LangChain, LangGraph, CrewAI, AutoGen, or OpenAI/Anthropic SDKs to automate discovery, reconciliation, and remediation pipelines.\nProficiency in leveraging LLMs and Retrieval-Augmented Generation (RAG) architectures to correlate vulnerability data with source code repositories, asset metadata, and exploit intelligence to filter false positives and determine real-world exploitability.\nStrong proficiency in Python for developing production-grade security automation, custom integrations, and consuming or building REST and GraphQL APIs.\nProven experience integrating security scanners with SOAR platforms, enterprise ticketing systems (Jira, ServiceNow), CMDBs, and collaboration platforms (Slack, Microsoft Teams) for automated ticket creation, routing, reminders, and SLA escalations.\nDeep command of CVSS, EPSS, and CISA KEV methodologies, with experience enriching vulnerability telemetry using threat feeds and business impact assessments.\nComprehensive understanding of cloud platforms (AWS, Azure, GCP), hybrid enterprise networks, container orchestration (Docker, Kubernetes), and CI/CD pipelines.\nWorking knowledge of NIST SSDF, EU CRA, and IEC regulatory frameworks, paired with the ability to build automated executive dashboards tracking MTTR, scan coverage, and SLA compliance.\nCompany Benefits and Perks:\nWe believe that the best solutions are developed by teams who embrace each other's unique experiences, skills, and abilities. We work hard to create a dynamic workforce where we encourage everyone to bring their authentic selves to work every day. We offer a variety of social programs, flexible work hours and family-friendly benefits to all of our employees.\nRetirement Plans\n\nMedical, Dental and Vision Coverage\n\nPaid Time Off\n\nPaid Parental Leave\n\nSupport for Community Involvement\n\nWe're serious about ourcommitment to a workplace where everyone can thrive and contribute to our industry-leading products and customer support, which is why we prohibit discrimination and harassment based on race, color, religion, gender, national origin, age, disability, veteran status, marital status, pregnancy, gender expression or identity, sexual orientation or any other legally protected status.\nOur Commitment to You:\nAt Trellix, we are committed to creating a safe and trustworthy experience for our customers, employees, and candidates. Please be aware that fraudulent recruiting activity can occur through fake job postings or impersonated communications.\nTrellix conducts interviews through professional channels only and does not use text messages, instant messaging, or group chats for interviews. We will never request sensitive personal information-such as your date of birth, Social Security number, or national ID number-during the interview process.\nTrellix also does not require candidates to pay fees, purchase products or services, or process payments of any kind as part of the recruiting or hiring process. And Trellix will never keep any original work authorization documents that we may be required to review during the hiring process.\nIf you have questions or believe you may have encountered fraudulent activity related to Trellix recruiting, please contact us .","description_format":"text","description_chars":6702,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Parental leave","Retirement plans"],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Endpoint Security","Information Security","Vulnerability Management"],"lifecycle":[{"event":"open","at":"2026-11-13T15:25:51Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":36,"reasons":["conf:2","win:early"],"computed_at":"2026-11-13T17:36:18Z"},"pay":null,"html_url":"https://alion.io/job/trellix-vulnerability-management-engineer-ai-automation","json_url":"https://alion.io/job/trellix-vulnerability-management-engineer-ai-automation.json","meta":{"generated_at":"2026-11-13T17:36:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":35229,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":42946},"rest":"https://alion.io/mcp/rest/get_company?id=42946"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftrellix-vulnerability-management-engineer-ai-automation"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftrellix-vulnerability-management-engineer-ai-automation"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftrellix-vulnerability-management-engineer-ai-automation"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/trellix-vulnerability-management-engineer-ai-automation\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftrellix-vulnerability-management-engineer-ai-automation"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4261030}},{"tool":"search_jobs","arguments":{"company":"trellix.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4261030},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}