CentralSquare Technologies logo
CentralSquare Technologies

CentralSquare Technologies provides technology solutions that help over 7,500 public sector agencies deliver vital administrative and safety services to residen

Vulnerability Operations Engineer

Location

Worldwide

Posted

9 days ago

Salary

0

Seniority

Senior

No structured requirement data.

Job Description

Vulnerability Operations Engineer

CentralSquare Technologies

Title: Vulnerability Operations Engineer Location: United States Job Description: What We’re About At CentralSquare, we don’t just build software - we power public servants and uplift communities with Hero-Grade Technology. Every line of code, every feature we deliver helps heroes across North America protect, serve, and save lives. When you join us, you become part of a mission-driven team creating technology that makes communities safer and stronger. Your Growth Matters. We believe heroes deserve opportunities to rise. That’s why we invest in your career with mentorship, learning programs, and clear paths for advancement. If you’re motivated, there’s no limit to how far you can go. Your Commitment Deserves Reward. We offer competitive compensation and a benefits package designed to support your life inside and outside of work—tuition reimbursement, parental leave, paid volunteer hours, and unlimited PTO. Plus, our flexible work environment gives you the freedom to balance your heroic work with personal well-being, whether you’re in the office or remote. Join us and help build the tools that power real-life heroes. Together, we make a difference. The Role CentralSquare is seeking a Vulnerability Operations (VulnOps) Engineer to join our Security team. This is an individual contributor role purpose-built for the post-AI era of vulnerability discovery — where AI models can now find and exploit flaws at machine speed, and reactive patch cycles are no longer sufficient. This role is not an advisory function. The VulnOps Engineer owns the full pipeline from discovery through fix delivery: running AI-powered scanning against CentralSquare's codebases and dependencies on a continuous basis, generating validated fixes, and submitting ready-to-merge pull requests into owning teams' Azure DevOps pipelines. App teams retain code review and merge authority; this role exists to ensure they are never handed a problem without also being handed a solution. Job Duties Include: Proactive Vulnerability Discovery - Operate and continuously improve an AI-powered scanning pipeline across CentralSquare's first-party codebases, open-source dependencies, and infrastructure components - Use Claude Code, Veracode, and Orca to conduct ongoing static analysis, software composition analysis (SCA), and cloud posture assessments - Apply reachability analysis to distinguish genuinely exploitable vulnerabilities from theoretical findings, reducing alert fatigue and focusing remediation effort where risk is real - Monitor threat intelligence feeds, CVE disclosures, and coordinated disclosure programs (including Project Glasswing patch releases) to identify newly disclosed vulnerabilities affecting CentralSquare's software supply chain Fix Development and Delivery - Develop and validate fixes (code patches, dependency upgrades, configuration changes) using AI coding agents such as Claude Code, verifying resolution without regressions before submission - Submit validated fixes as pull requests into owning teams' Azure DevOps repositories, with clear documentation of the vulnerability, risk context, and fix rationale to support efficient review and merge - Collaborate with application and infrastructure teams during code review, providing technical context and responding to questions about proposed changes SLA Ownership and Reporting - Own the end-to-end SLA lifecycle for all open findings, maintaining real-time tracking of detection, fix submission, and merge status in the vulnerability management system - Proactively escalate findings approaching SLA breach with remediation options and risk context - Produce regular reporting on pipeline health, SLA adherence, remediation velocity, and open risk posture for the security leadership team Toolchain and Pipeline Maintenance - Own the configuration, tuning, and operational health of VulnOps tooling including Veracode, Orca, Claude Code, and Azure DevOps security integrations - Identify and reduce false positive rates through policy tuning and reachability filtering, ensuring signal quality remains high as scan volume increases - Contribute to the development of automated remediation pipelines, including AI-assisted fix generation integrated directly into CI/CD workflows - Evaluate and recommend new tools and capabilities as the AI security tooling landscape evolves Cross-Functional Collaboration - Work closely with application engineering, DevOps, and infrastructure teams to ensure fix delivery is efficient and minimally disruptive to development velocity - Provide security guidance to engineering teams on secure coding practices and dependency management in the context of AI-accelerated vulnerability discovery - Partner with the Risk and Compliance team to ensure vulnerability data and SLA metrics align with audit and regulatory reporting requirements (NIST CSF, PCI DSS, CJIS) - Perform other duties as assigned Skills & Requirements Qualifications Education and Experience - Bachelor's degree in Cybersecurity, Computer Science, or Information Technology, or equivalent professional experience - 5–7 years of professional experience in application security, vulnerability management, or a combined security engineering role - Demonstrated hands-on experience using AI coding agents (Claude Code or equivalent) to find, evaluate, and generate fixes for software vulnerabilities Technical Skills - Proficiency with SAST and SCA tooling; direct experience with Veracode strongly preferred - Experience with cloud security posture management; direct experience with Orca preferred - Working experience with Azure DevOps for CI/CD pipeline integration and pull request workflows - Ability to read, understand, and write code across at least two languages commonly used in enterprise SaaS environments (e.g., Java, C#, Python, JavaScript/TypeScript, Terraform) - Strong understanding of reachability analysis and the ability to apply it to distinguish exploitable findings from theoretical risk - Familiarity with dependency and supply chain security concepts, including SBOM generation and management - Working knowledge of common vulnerability classes (injection, memory corruption, authentication flaws, insecure deserialization, etc.) and their remediation patterns - Understanding of security frameworks including NIST CSF and CIS Controls Soft Skills and Work Style - Highly systematic and process-driven — capable of managing a high volume of concurrent findings without losing precision or letting items fall through the cracks - Self-directed and accountable: this role is measured by fix delivery and SLA outcomes, not activity metrics - Strong written communication skills — fix submissions must include documentation that gives owning teams sufficient context for confident, efficient code review - Comfortable working across organizational boundaries, earning credibility with engineering teams through technical quality rather than authority - Able to prioritize effectively under pressure, with clear judgment about when to escalate versus resolve independently CJIS Clearance A required part of the onboarding process for this role involves obtaining CJIS (Criminal Justice Information Services) clearance—a critical credential for safeguarding public safety data. At CentralSquare, we’ll stand with you every step of the way to secure this clearance should you be selected for hire. As part of the process, a comprehensive background check will be conducted, and please note that U.S. citizenship or permanent residency is generally required to obtain CJIS clearance.

Related Categories

Related Job Pages

More Operations Jobs

BCD Travel logo

Operations Supervisor

BCD Travel

Travel smart. Achieve more.

Operations10 days ago
Full TimeRemoteTeam 10,001+Since 2006H1B Sponsor

• Manage day-to-day operations of a travel consultant team, including workload and KPI management • Provide leadership and coaching to team members • Develop learning programs to close competency gaps • Provide industry information to clients and maintain regulatory knowledge • Monitor GDS queues for quality control

Canada
$58K - $70K / year
BCD Travel logo

Supervisor, Operations

BCD Travel

Travel smart. Achieve more.

Operations10 days ago
Full TimeRemoteTeam 10,001+Since 2006H1B Sponsor

• Responsible for day-to-day management of a travel consultant team, including managing key performance indicators (KPI), workload, providing support and coaching whilst ensuring adherence to agreed processes, service standards, and quality expectations across a global operations setup • Actively coach and develop the team to meet and exceed all performance targets • Supervise and support agents in managing crew movements, rotations, and disruptions in a complex, 24/7 service environment • Seek opportunities to review operational processes and the commercial relationship with management team and provide suggestions for improvement • Have a strong understanding of a client travel policy and can appropriately guide and consistently provide consultation to the customer • Develop learning program for closing own short- and long-term competency gaps • Assist the consultants in appropriately responding and resolving customers' inquiries • Monitor, sort and work on contact and reservation queues to maintain quality control

Canada
$58K - $70K / year
Medtronic logo

Senior Medical Affairs Specialist

Medtronic

Medtronic is a global leader in medical technology, dedicated to improving healthcare through innovative therapies and devices. Known for transforming patient c

Operations10 days ago

Title: Senior Medical Affairs Specialist - PVH Location: Minneapolis, Minnesota, United States of America Job Description: Full time job requisition id R62258 At Medtronic you can begin a life-long career of exploration and innovation, while helping champion healthcare access and equity for all. You’ll lead with purpose, breaking down barriers to innovation in a more connected, compassionate world. A Day in the Life The Peripheral Vascular Health operating unit focuses on diagnosing and treating diseases of the peripheral arteries and veins, helping patients restore blood flow and reduce the risk of limb loss and other serious complications. The portfolio includes minimally invasive technologies such as drug-coated balloons, stents, atherectomy, thrombectomy, and embolic protection, designed to address complex peripheral vascular disease across a range of patient anatomies. By combining innovation, clinical evidence, and physician partnership, the operating unit aims to improve procedural outcomes and quality of life for patients worldwide. At Medtronic, we bring bold ideas forward with speed and decisiveness to put patients first in everything we do. This position is remote to enhance our competitive edge and expand our cross-functional collaboration efforts. This role will require 70% of travel to enhance collaboration and ensure successful completion of projects.                   Reporting to the Director of Medical Science, the Senior Medical Affairs Specialist is responsible for leading clinical evidence development for Venous applications globally within the Peripheral Vascular Health Operating Unit at Medtronic. Specifically, this role provides subject matter expertise internally and acts as the preferred industry resource to healthcare professionals (HCPs) for clinical science evidence within the Venous domain.  Success in the role relies heavily on several factors:  - Synthesizing succinct messages from complex data and information;  - Applying critical thinking to scientific and clinical research challenges;  - Educating and coaching HCPs and Key Opinion Leaders (KOLs);  - Influencing cross-functional teams and communicating throughout all levels of the organization;  - Establishing trust and credibility within the Peripheral Vascular Health treatment community.  - Therapy-specific expertise    The Senior Medical Science Specialist must be detail-oriented and self-motivated, with excellent analytic, facilitation, and communication skills (both oral and written).  This role works collaboratively with nearly all functional teams within the Peripheral Vascular Health Operating Unit, including Marketing, Clinical, Regulatory, Research and Development, Scientific Communications, and Physician Education.  Internally, this role is the Thrombectomy subject matter expert, ensuring product clinical messaging, clinical data development, and physician education activities are aligned to operating unit priorities.  Specifically, some key activities of the Senior Medical Science Specialist include physician education content and training, scientific and clinical evidence dissemination cross-functionally, and evidence development and prioritization.  Externally, the Senior Medical Science Specialist is the preferred industry clinical science resource for HCPs, establishing strong clinical science relationships with KOLs, and providing clinical science guidance, coaching to faculty and customers and fielding unsolicited request for information on off-label use of technologies.    Role and Responsibilities:  - Be part of a world-class team of individuals dedicated to advancing patient care through transparent and timely clinical evidence generation and dissemination  - Establish, develop, and foster solid relationships with Key Opinion Leaders (KOLs) and internal business partners, and identify future KOLs at strategic academic and community research centers to build relationships early in their career.  - Serve as the key scientific representative of Medtronic Peripheral Vascular Health for health care professionals, providing deep and advanced disease state and therapy information.  - Facilitate the work of KOLs in alignment with Medtronic medical communication strategies through publication and podium activities.  - Gather feedback and insights from KOLs and physician advisors to better inform Medtronic’s research and development teams to overall strategic direction.  - Facilitate initial discussions, intake, and evaluation of physician-initiated research proposals, including ensuring timely communication between requestor and company.  - Understand and effectively communicate current scientific knowledge while maintaining technical expertise within a therapeutic area through attendance of major conferences, congresses, workshops, and training programs.  - Monitor all major meetings for abstract deadlines and work with investigators of Medtronic sponsored research to drive podium presence in support of corporate communication strategies and plans.  - Support field and internal training needs as therapy expert.  Review and provide input on therapy related training materials to ensure scientific accuracy of content.  Collaborate with marketing to ensure all key product messages and claims are scientifically valid and accurate.  - Maintains a deep understanding of the science behind our products.  - Develops competitive intelligence in our product space.  - Drives education and outreach for safe and effective use of our products.  - Develops, implements and oversees integrated evidence-based medical affairs strategic plans for relevant Medtronic organizations.  - Utilizes advanced subject matter expertise to provide medical input to various functions (General Management, Global Strategy & Portfolio Management, Business Development & Licensing, Research & Development, & Marketing) and organizational units to facilitate insightful decision-making and enable achievement of business objectives.  - Ensures effective objective value propositions are developed and articulated for Medtronic technologies to stakeholders (patients, health care providers, payers, government agencies, health technology assessment organizations, public) through appropriate channels.  - Domestic and international travel up to 50% of time.     Must Have:  To be considered for this role, please ensure the minimum requirements are evident in your applicant profile.   - Bachelor’s degree is required with a minimum of 4 years of integrated evidence-based medical affairs strategic plan experience, in a clinical or therapeutic environment  - Or advanced degree with a minimum of 2 years of integrated evidence-based medical affairs strategic plan experience, in a clinical or therapeutic environment.  Nice to Have:  - Significant direct experience communicating complex scientific information in a manner that meets the needs of a variety of internal stakeholders and external healthcare practitioners.  - Demonstrated success in effective interpersonal and communication skills and ability to build and foster relationships with KOLs.  - (Ph.D., M.D) highly desired  - Experience in pharma, biotech and or/medical devices  - Statistical or clinical trial experience  - Intellectual curiosity and intelligence about the field of science/medicine for which they are responsible.  - Highly motivated to comprehend and communicate large amounts of scientific content in a clear, concise fashion.  - Demonstrated ability to work with often demanding or difficult clients.  - Significant experience and success in self-managing priorities and multitasking projects.  - Strong teamwork/Interpersonal skills.  - Advanced presentation and computer skills with expertise in literature identification and evaluation.  - Physician education experience  - Advanced data visualization techniques      For Baccalaureate degrees earned outside of the United States, a degree that satisfies the requirements of 8 C.F.R. § 214.2(h)(4)(iii)(A) is required.     Physical Job Requirements   The above statements are intended to describe the general nature and level of work being performed by employees assigned to this position, but they are not an exhaustive list of all the required responsibilities and skills of this position.    The physical demands described within the Responsibilities section of this job description are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. For Office Roles: While performing the duties of this job, the employee is regularly required to be independently mobile. The employee is also required to interact with a computer, and communicate with peers and co-workers. Contact your manager or local HR to understand the Work Conditions and Physical requirements that may be specific to each role.   U.S. Work Authorization & Sponsorship At Medtronic, we are committed to fostering an environment where employees can thrive and make a meaningful impact. In alignment with our enterprise-wide workforce planning approach, U.S. work authorization sponsorship (H-1B, TN, J, etc.) is offered exclusively for Principal-level roles and above, where specialized expertise aligns with long-term business needs. Roles below the Principal level require candidates to possess unrestricted U.S. work authorization at the time of hire and for the duration of employment. Join us in our mission to alleviate pain, restore health, and extend life—where your unique background and perspective are valued. Benefits & Compensation   Medtronic offers a competitive Salary and flexible Benefits Package A commitment to our employees lives at the core of our values. We recognize their contributions. They share in the success they help to create.  We offer a wide range of benefits, resources, and competitive compensation plans designed to support you at every career and life stage.     Salary ranges for U.S (excl. PR) locations (USD):$108,000.00 - $162,000.00       This position is eligible for a short-term incentive called the Medtronic Incentive Plan (MIP).             The base salary range is applicable across the United States, excluding Puerto Rico and specific locations in California. The offered rate complies with federal and local regulations and may vary based on factors such as experience, certification/education, market conditions, and location. Compensation and benefits information pertains solely to candidates hired within the United States (local market compensation and benefits will apply for others).     The following benefits and additional compensation are available to those regular employees who work 20+ hours per week: Health, Dental and vision insurance, Health Savings Account, Healthcare Flexible Spending Account, Life insurance, Long-term disability leave, Dependent daycare spending account, Tuition assistance/reimbursement, and Simple Steps (global well-being program).   The following benefits and additional compensation are available to all regular employees: Incentive plans, 401(k) plan plus employer contribution and match, Short-term disability, Paid time off, Paid holidays, Employee Stock Purchase Plan, Employee Assistance Program, Non-qualified Retirement Plan Supplement (subject to IRS earning minimums), and Capital Accumulation Plan (available to Vice Presidents and above, or subject to IRS earning minimums).   Regular employees are those who are not temporary, such as interns.  Temporary employees are eligible for paid sick time, as required under applicable state law, and the Employee Stock Purchase Plan. Please note some of the above benefits may not apply to workers in Puerto Rico.   Further details are available at the link below: Medtronic benefits and compensation plans   About Medtronic   We lead global healthcare technology and boldly attack the most challenging health problems facing humanity by searching out and finding solutions. Our Mission — to alleviate pain, restore health, and extend life — unites a global team of 95,000+ passionate people.  We are engineers at heart— putting ambitious ideas to work to generate real solutions for real people. From the R&D lab, to the factory floor, to the conference room, every one of us experiments, creates, builds, improves and solves. We have the talent, diverse perspectives, and guts to engineer the extraordinary.   Learn more about our business, mission, and our commitment to diversity here.   It is the policy of Medtronic to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, Medtronic will provide reasonable accommodations for qualified individuals with disabilities.   If you are applying to perform work for Medtronic, Inc. (“Medtronic”) in any position which will involve performing at least two (2) hours of work on average each week within the unincorporated areas of Los Angeles County, you can find here a list of all material job duties of the specific job position which Medtronic reasonably believes that criminal history may have a direct, adverse and negative relationship potentially resulting in the withdrawal of a conditional offer of employment. Medtronic will consider for employment qualified job applicants with arrest or conviction records in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

Minnesota
$108K - $162K / year

Role Description The Production Operations Coordinator is the operational backbone of Little Cinema’s Production department. This role ensures every project — from theatrical premieres to large-scale activations — has its budget tracked, vendors vetted, contracts moving, insurance in place, and project tracking dialed in. This is a behind-the-scenes role focused on systems, structure, and forward planning rather than on-site execution. You will work closely with the Director of Production, Executive Producers, and Producers across multiple concurrent projects, building and maintaining the operational infrastructure that allows our team to deliver world-class work. Key Responsibilities - Project Tracking - Setup and maintain live project folders across multiple active projects. - Build and maintain project trackers, status docs, and shared production resources. - Provide additional operational support to the Production department as needed. - Outline key deadlines, milestones and keep the teams on track. - Budget Tracking & Reconciliation - Maintain live budget trackers across multiple active projects; log actuals against estimates and flag variances early. - Partner with Producers to reconcile project budgets at wrap, including final cost reports and PO close-outs. - Track deposits, milestone payments, and outstanding balances across vendors and clients. - Vendor Sourcing & Management - Research and vet new vendors across categories including fabrication, AV, staffing, rentals, catering, talent, and transportation. - Maintain Little Cinema’s vendor database with current contact info, rate cards, capabilities, and past-project notes. - Collect quotes, compare bids, and support Producers in vendor selection decisions. - Contracting & Legal Coordination - Initiate, route, and track vendor and freelance agreements through signature using standard templates. - Coordinate with internal leadership and outside counsel on red-lines, riders, and non-standard terms. - Maintain a clean, organized contract archive including fully executed copies, key dates, and renewal triggers. - Insurance & COIs - Request, review, and issue Certificates of Insurance for productions, venues, and vendors. - Liaise with our insurance broker on project-specific coverage including general liability, event cancellation, equipment, and workers’ comp. - Track expirations, additional insured requirements, and venue-specific compliance needs. - Invoicing & AP/AR Coordination - Generate client invoices in coordination with Producers and Finance against agreed payment schedules. - Process and code incoming vendor invoices; reconcile against POs and project budgets. - Follow up on outstanding payments and keep AR/AP dashboards current. - Permits - Support the team with permit research and applications. Qualifications - 2–4 years of experience in production coordination, production accounting, agency operations, or a similar role, ideally in experiential, live events, film/TV, or brand marketing. - Highly organized with strong attention to detail and a track record of building and maintaining operational systems. - Proficient with spreadsheets and comfortable with budget tracking, reconciliation, and basic financial math. - Strong written and verbal communicator capable of managing vendor and internal relationships with professionalism. - Familiar with contract basics and comfortable reviewing and flagging sections against company standards. - Self-directed and proactive, with the ability to translate partial briefs into clear, actionable outputs. - Calm and effective in a deadline-driven environment with multiple concurrent projects. - Based in Los Angeles. Nice to Have - Familiarity with COI processes and DocuSign or similar e-signature workflows. - Familiarity with Procurify. - Prior exposure to entertainment, music, sports, or consumer brand clients. - Working knowledge of Los Angeles permitting and venue compliance.

United States