Zocdoc is the beginning of a better healthcare experience for millions of patients every month.
Senior Staff Software Engineer, Vulnerability Management
Location
United States
Posted
1 day ago
Salary
$200K - $290K / year
Seniority
Senior
Job Description
Senior Staff Software Engineer, Vulnerability Management
Zocdoc
• Owning the technical roadmap for an automated, AI-driven vulnerability scanning platform across cloud infrastructure, container registries, operating systems, and application-layer software. • Building context-engine models that correlate findings from SAST, DAST, SCA, and cloud posture tooling to determine true runtime exploitability. • Implementing AI-assisted triage workflows that classify vulnerabilities, reduce false positives, and route validated issues to the right engineering teams. • Leading targeted red teaming and collaborative purple teaming exercises to validate exploitable paths and strengthen runtime defenses. • Partnering directly with Software Engineering and DevOps to build automated remediation pipelines, including dependency update pull requests and base-image patching workflows. • Engineering security scanning guardrails into CI/CD pipelines and providing structured telemetry to support continuous compliance and executive risk visibility. • Working with cutting-edge GenAI tools and technology to analyze findings, improve prioritization, and accelerate remediation workflows.
Job Requirements
- Meaningful experience in security engineering, vulnerability management, or software development, with at least 8 years focused on infrastructure, container platforms, and product security.
- A proven track record of writing production-grade automation scripts and building custom security tooling at scale.
- Hands-on experience planning or executing offensive security exercises, red teaming, purple teaming, or penetration testing.
- Deep experience securing cloud infrastructure and containerized ecosystems using platforms such as AWS, GCP, or Azure, along with Docker and Kubernetes.
- Advanced proficiency in Python, Go, or Rust to build automation, integrate scanner APIs, and orchestrate automated patching workflows.
- Strong familiarity with adversarial frameworks, vulnerability scoring systems such as CVSS and EPSS, and common application and infrastructure attack vectors including the OWASP Top 10.
- Experience integrating security scanners into CI/CD workflows and using AI or LLM APIs to analyze code or log data for rapid prioritization.
- Required: the ability to integrate generative AI tools into daily workflows to automate tasks, foster innovation, and maximize productivity.
- Advanced security certifications such as OSCE, OSCP, GXPN, CISSP, or equivalent practical engineering experience are highly valued.
Benefits
- Flexible work environment
- Unlimited Vacation
- 100% paid employee health benefit options (including medical, dental, and vision)
- 401(k) with employer funded match
- Corporate wellness programs with Headspace and Peloton
- Sabbatical leave (for employees with 5+ years of service)
- Competitive paid parental leave and fertility/family planning reimbursement
- Cell phone reimbursement
- Employee Resource Groups and ZocClubs to promote shared community and belonging
- Great Place to Work Certified
Related Guides
Related Job Pages
More Full-stack Engineer Jobs
• Lead from the code • Be a core individual contributor in Go, Python, and JavaScript • Set the technical standard through pull request reviews, architecture decisions, and hands-on pair programming • Identify technical debt and risk clearly, communicate tradeoffs to stakeholders • Build out the agile process including sprint planning, refinement, and process development; help us move out of “startup mode” • Directly manage one engineer • Collaborate in a strong remote team environment, building robust and reliable solutions with a strong value proposition • Support a team that cares about what we build, with a bias for action and willingness to take risks
• responsible for lead and supervise circuit design and chip development projects • define device and circuit architectures for next-generation products • design circuit blocks for future products • review circuits and architectures to ensure high quality designs • propose improvements and implement methodologies for IC development • develop precision timing circuit architectures, design innovative circuits with aggressive technical performance specifications, performing transistor-level design and simulations • plan and execute circuit designs that address demanding frequency stability, phase noise and power consumption, silicon die area specifications • perform technology, architecture, circuit design, and parametric design trade-offs to accomplish spec-compliant designs • ensure first-pass success on Analog CMOS circuit solutions, fully leveraging SiTime’s innovative MEMS technology offerings • collaborate with Digital Design Engineers, CAD, Systems Engineering, ATE Engineering and Applications teams to design chips with DFT, DFM, achieve rapid silicon bring-up and fast time-to-production release • deploy robust design methodology and ensure comprehensive design reviews • supervise and guide Senior Analog Circuit Designers • supervise Analog Circuit Physical Design Layout and edit layouts • perform post-layout parasitic-extraction and back-annotated simulations to validate design across Process, Voltage, Temperature • perform requisite Monte Carlo Analysis on key circuits to ensure Six-Sigma quality and yields • participate in bring-up of silicon prototypes • initiate Design-of Experiments for Root Cause Analysis, investigate anomalous observations in silicon across PVT conditions, and propose solutions • drive other projects as needed by management or as business needs change
Full Stack Engineer – FinTech, Food & Beverage
FlatgigsScaling Investor-Backed Startups & Growth Companies
• Design, develop, test, and maintain scalable web applications. • Develop and enhance features for our POS and Inventory Management System (IMS). • Build secure, reliable, and high-performance backend services and APIs. • Develop responsive and user-friendly frontend applications. • Resolve production issues, perform root cause analysis, and implement permanent fixes. • Participate in application deployments and ensure smooth production releases. • Optimize application performance, security, and scalability. • Collaborate with Product Managers, UI/UX Designers, QA Engineers, and DevOps teams throughout the software development lifecycle. • Participate in sprint planning, technical discussions, architecture reviews, and code reviews. • Write clean, maintainable, and well-documented code following engineering best practices.
Software Engineer, User Profile
StackAdaptStackAdapt is an advertising platform that delivers self-serve solutions that enable digital marketers and agencies to thrive. As an employer, the company has been recognized by Ad
Role Description The User Profile team at StackAdapt builds and scales the systems that power user identity, audience segmentation, and profile data across our advertising platform. We solve complex distributed systems challenges involving high-throughput data processing, low-latency services, and large-scale data management to enable real-time targeting, bidding, measurement, and marketing workflows. StackAdapt is a Remote First company. We are open to candidates located anywhere in Canada for this position. What You'll Be Doing: - Build highly scalable, distributed real-time microservices primarily written in Go. - Design and develop systems that ingest, process, and manage user profile and audience data at scale. - Build event-driven software utilizing messaging technologies such as Kafka. - Work with distributed databases and storage technologies including ScyllaDB, TiDB, and Redis. - Write performance-efficient, memory-optimized code that delivers reliable, low-latency services. - Collaborate with engineers across Product, Machine Learning, Data, and Infrastructure to build core platform capabilities. Qualifications - 2+ years of experience as a Backend Software Engineer. - Very strong problem solving skills in data structures, algorithms, and optimization. - Experience working with relational databases and/or distributed data stores. - Experience building scalable microservices and distributed systems. - Experience with Go, Java, Python, C++, or another modern backend programming language. - A passion for building reliable, high-performance systems that operate at scale. Benefits - Highly competitive salary - Retirement/ 401K/ Pension Savings globally - Competitive Paid time off packages including birthday's off! - Access to a comprehensive mental health care program - Health benefits from day one of employment - Work from home reimbursements - Optional global WeWork membership for those who want a change from their home office and hubs in London and Toronto - Robust training and onboarding program - Coverage and support of personal development initiatives (conferences, courses, books etc) - Access to StackAdapt programmatic courses and certifications to support continuous learning - An awesome parental leave program - A friendly, welcoming, and supportive culture - Our social and team events!




