Senior Staff Security Engineer, Vulnerability Management

Architects and scales Zocdoc's vulnerability detection and remediation program across Compliance, Security and Engineering, with the aim of moving from reactive firefighting to continuous, automated risk reduction. The engineer owns the roadmap for an AI-driven scanning platform covering cloud, containers, operating systems and application code, correlates SAST, DAST, SCA and posture findings to judge real exploitability, builds AI-assisted triage and automated fixes such as dependency updates and base-image patching, adds scanning guardrails to CI/CD, and runs red and purple team exercises to prove which paths are exploitable. Zocdoc wants at least eight years focused on infrastructure, container and product security, production automation in Python, Go or Rust, offensive testing experience, and daily use of generative AI tools. Remote in the US.