Snyk Vulnerbility Engineer

Senior Vulnerability Management Specialist

Application Security | Dev Sec Ops  | Snyk | Automation

We are seeking an experienced Senior Vulnerability Management Specialist to design, own, and continuously improve our application vulnerability management programme.

You'll be responsible for driving vulnerability remediation across development and Dev Ops teams, ensuring security risks are prioritised, tracked, remediated, and reported through a scalable and automated process.

• Own the end-to-end application vulnerability management lifecycle.
• Triage and prioritise vulnerabilities using risk-based methodologies including CVSS, EPSS, exploitability, business criticality, and data sensitivity.
• Manage findings from SAST, DAST and SCA security tooling, with a strong focus on application security.
• Drive remediation activities with engineering, Dev Ops, and application owner communities.
• Create and manage Jira workflows, tickets, SLAs, escalations, and exception processes.
• Verify remediation through rescanning and reporting.
• Develop automation for vulnerability tracking, ownership assignment, notifications, reporting, and governance.
• Produce management dashboards and security risk reporting.
• Continually improve vulnerability coverage, remediation efficiency, and developer engagement.

• 5+ years' experience in Vulnerability Management, Application Security, Dev Sec Ops , or a related security discipline.
• Strong experience operating enterprise-scale application vulnerability management programmes.
• Experience working with Snyk or equivalent application security platforms.
• Strong understanding of secure software development, CI/CD pipelines, and modern Dev Sec Ops  practices.
• Experience working closely with software engineering and Dev Ops teams to drive remediation.
• Hands-on experience with Jira workflow design and automation.
• Ability to communicate technical risks clearly to both technical and non-technical stakeholders.

• Git Lab, Git Hub, Azure Dev Ops, or Bitbucket.
• OWASP Top 10, CVE, CVSS, CWE, and EPSS.
• AWS and Infrastructure-as-Code automation (Terraform).
• Experience in regulated environments such as ISO 27001 or NIS
  2.

A senior security professional with a blend of Application Security, Vulnerability Management, Dev Sec Ops , stakeholder engagement, and automation expertise
. You'll be comfortable influencing engineers and application owners, driving remediation without direct authority, and building a scalable, risk-driven security programme that supports modern software delivery