Vulnerability Management Engineer (AI Automation)Associate Security Researcher Software Development Engineer Software Development Engineer – Agentic AIReverse Engineer - Android Sr Cyber Threat Intelligence Analyst (TS/SCI Clearance Required)Solution Sales Engineer Director - Customer Response Engineering Account Manager Manager, Professional Services (TS/SCI Or Higher Required)SAP Dev Ops Architect Capture Manager Public Sector, Department of War, Intelligence, System Integrators Enterprise Account Manager - Saudi Arabia Sr. Solutions Consultant Federal Sales Account Manager Sr. Solutions Consultant (Endpoint - TS/SCI Cleared)SLED & Healthcare Account Executive Sales Engineer Channel Account Manager - Eastern Canada Federal Sales Account Manager – SIsMajor Account Executive Enterprise Account Manager - Canada Majors Account Executive Federal Civilian Account Manager Cyber Threat Hunter (TS/SCI Clearance Required)Federal Civilian Account Manager Customer Success Manager Senior Technical Support Engineer Customer Success Manager (Public Sector)Inside Sales Representative - Turkey (Turkish)Solution Consultant Enterprise Account Manager, Italy Compensation Partner - EMEAStaff Software Development Engineer Associate Customer Success Manager Public Sector Strategic Account Manager - UK & Ireland Cyber Threat Hunter (TS/SCI Clearance Required)Inside Sales Representative - CIS region Software Development Engineer – Agentic AIAI & Digital Learning Content Developer Android Reverse Engineer Enterprise Sales Lead- (India)Enterprise Account Manager Director - Solutions Engineering, India Senior Director, APJ Sales Engineering Compensation Manager - India, APAC and Japan Senior Security Consultant Senior Solution Consultant Inside Sales Representative

Vulnerability Management Engineer (AI Automation)

ID: JR0038063

Remote India

Vulnerability Management Engineer (AI Automation)

About Trellix
Trellix is a global cybersecurity leader helping organizations build cyber resilience for the AI era. Combining AI-native security, operational threat intelligence, and automated detection and response, Trellix provides defense-grade protection at machine speed across on-premises, air-gapped, operational technology, hybrid, and cloud environments. Trellix helps customers anticipate threats, scale effective security operations, maintain business continuity, and adapt their security posture for the modern threat landscape. Working with a broad partner ecosystem and global intelligence collaborators, Trellix helps strengthen the collective defense against cybercriminals and state-sponsored attacks. At Trellix, we empower professionals at all career stages to expand their technical expertise, lead strategic initiatives, and make a tangible global impact. Whether you are an industry pioneer or an emerging specialist, Trellix provides the tools and opportunities to enhance and expand your skill set.



Join our mission to scale AI-driven cyber defense alongside an AI-accelerated threat landscape, and help build a safer, more resilient future. More at .

We are looking for strategic, hands-on Security Engineer to drive end-to-end vulnerability management, governance, and risk-based prioritization across hybrid, cloud, and containerized environments in alignment with NIST SSDF, EU CRA, and IEC standards. The role focuses on engineering autonomous AI agents to automate asset discovery, finding validation, exploitability analysis, ticket orchestration, and zero-day response. Candidates will lead cross-functional remediation with IT and Dev Ops teams, streamline exception workflows, and deliver executive-level risk reporting and metrics.

About Role:

- Direct continuous asset discovery, vulnerability assessment, remediation verification, and executive reporting across hybrid cloud, container, and application ecosystems.
- Contextualize vulnerability severity (CVSS) using real-world threat intelligence (EPSS, CISA KEV) and business criticality. Spearhead rapid response protocols for critical zero-day vulnerabilities, implementing interim compensating controls and formal risk-acceptance workflows as required.
- Architect and deploy autonomous AI agents to automate asset discovery, CMDB reconciliation, false-positive elimination, exploitability analysis, intelligent ticket routing, SLA breach escalations, and executive reporting.
- Establish and enforce program governance, remediation SLAs, and exception management frameworks aligned with NIST SSDF, EU CRA, and IEC standards.
- Define, track, and present key performance indicators (scan coverage, MTTR, SLA adherence, and vulnerability aging) to senior leadership. Partner with and mentor IT Operations, Dev Ops, and Software Engineering teams to accelerate remediation and embed security-by-design practices.

About You:

- 5+ years in Information Security with a strong focus on Vulnerability Management, Application Security, or Cloud Security.
- Extensive hands-on expertise with industry-leading VM, CNAPP, and App Sec solutions—including Tenable, Wiz, Qualys, Crowd Strike, or Snyk—with proven ability to programmatically orchestrate scans, ingest telemetry, and validate remediation.
- Demonstrated experience designing and deploying autonomous AI agents and multi-step LLM workflows using frameworks such as Lang Chain, Lang Graph, CrewAI, Auto Gen, or OpenAI/Anthropic SDKs to automate discovery, reconciliation, and remediation pipelines.




- Proficiency in leveraging LLMs and Retrieval-Augmented Generation (RAG) architectures to correlate vulnerability data with source code repositories, asset metadata, and exploit intelligence to filter false positives and determine real-world exploitability.
- Strong proficiency in Python for developing production-grade security automation, custom integrations, and consuming or building REST and GraphQL APIs.
- Proven experience integrating security scanners with SOAR platforms, enterprise ticketing systems (Jira, Service Now), CMDBs, and collaboration platforms (Slack, Microsoft Teams) for automated ticket creation, routing, reminders, and SLA escalations.
- Deep command of CVSS, EPSS, and CISA KEV methodologies, with experience enriching vulnerability telemetry using threat feeds and business impact assessments.
- Comprehensive understanding of cloud platforms (AWS, Azure, GCP), hybrid enterprise networks, container orchestration (Docker, Kubernetes), and CI/CD pipelines.
- Working knowledge of NIST SSDF, EU CRA, and IEC regulatory frameworks, paired with the ability to build automated executive dashboards tracking MTTR, scan coverage, and SLA compliance.

We believe that the best solutions are developed by teams who embrace each other's unique experiences, skills, and abilities. We work hard to create a dynamic workforce where we encourage everyone to bring their authentic selves to work every day. We offer a variety of social programs, flexible work hours and family-friendly perks to all of our employees.

- Retirement Plans

- Medical, Dental and Vision Coverage

- Paid Time Off

- Paid Parental Leave

- Support for Community Involvement

We're serious about our commitment to a workplace where everyone can thrive and contribute to our industry-leading products and customer support, which is why we prohibit discrimination and harassment based on race, color, religion, gender, national origin, age, disability, veteran status, marital status, pregnancy, gender expression or identity, sexual orientation or any other legally protected status.

At Trellix, we are committed to creating a safe and trustworthy experience for our customers, employees, and candidates. Please be aware that fraudulent recruiting activity can occur through fake job postings or impersonated communications.

Trellix conducts interviews through professional channels only and does not use text messages, instant messaging, or group chats for interviews. We will never request sensitive personal information—such as your date of birth, Social Security number, or national ID number—during the interview process.

Trellix also does not require candidates to pay fees, purchase products or services, or process payments of any kind as part of the recruiting or hiring process. And Trellix will never keep any original work authorization documents that we may be required to review during the hiring process.

📌 Vulnerability Management Engineer (AI Automation) (India)
🏢 Trellix
📍 India