Staff Security Engineer – Vulnerability Operations

Our Mission:

6sense is on a mission to revolutionize how B2B organizations create revenue by predicting customers most likely to buy and recommending the best course of action to engage anonymous buying teams. 6sense Revenue AI is the only sales and marketing platform to unlock the ability to create, manage and convert high-quality pipeline to revenue.

Our People:

People are the heart and soul of 6sense. We serve with passion and purpose. We live by our Being 6sense values of Accountability, Growth Mindset, Integrity, Fun and One Team. Every 6sensor plays a part in defining the future of our industry-leading technology. 6sense is a place where difference-makers roll up their sleeves, take risks, act with integrity, and measure success by the value we create for our customers.

We want 6sense to be the best chapter of your career.

About the Role :

You will lead the end-to-end vulnerability management program across application, infrastructure, and cloud security domains. This includes driving detection, triage, remediation, and reporting workflows, while partnering with engineering, product, and GRC teams to scale secure-by-design practices.

Key Responsibilities :

• Program Ownership: Lead and enhance the end-to-end vulnerability lifecycle—detection, triage, remediation, and reporting—across cloud, infrastructure, and application layers. Design and execute quarterly (O)KRs.

• Technical Leadership: Build and maintain automation pipelines for vulnerability detection and response (e.g., Wiz, GitHub, Ox, Invicti, HackerOne).

• Metrics & Reporting: Develop and maintain critical security metrics and dashboards to drive security roadmaps, mature SecEng technologies, increase automation and enforce risk-based decisions across 6sense.

• Cross-Functional Collaboration: Partner with Engineering, GRC, IT, and Product to embed security into SDLC and CI/CD pipelines, ensuring strict adherence to process and security controls.

• Process Optimization: Implement major iterations of VulnOps programs in alignment with changing industry trends, predictions and regulatory demands. Standardize and scale vulnerability triage and remediation workflows using tools like Jira, Tines, Slack, and custom scripts.

• Incident Response: Leads off-hours incident response or urgent escalations related to critical vulnerabilities and patches while keeping security leadership informed.

• Mentorship & Influence: Coach junior engineers and influence security culture across the org.

Performance Measurement :

• In-depth knowledge of 6sense’s product, environment, systems and architecture

• Drives weekly 1:1s with Manager and monthly skip levels, leads project related 1:1s with security engineers

• Actively contributes to the mitigation and/or remediation of security vulnerabilities to include incident response

• Ensures adherence to strict deadlines and SLAs for assigned programs

• Delivers on end-to-end major security projects and OKRs

• Matures handbook pages, runbooks, workflows, dashboards and automation

• Develops detailed project plans and provides project status update on weekly basis

• Positive mentorship of engineers of varying levels of experience

• Improves vulnerability technology and bug bounty programs

Qualifications :

• 8+ years in security engineering, with deep experience in vulnerability management.

• Strong background in AppSec, InfraSec, and CloudSec (AWS preferred).

• Hands-on experience with SAST, DAST, Bug Bounty, container scanning, and IaC security.

• Familiarity with frameworks like NIST, MITRE ATT&CK, and OWASP.

• Strong scripting and automation skills (Python, Bash, etc.).

• Excellent program management, communication and stakeholder management skills.

Our Benefits:

Full-time employees can take advantage of health coverage, paid parental leave, generous paid time-off and holidays, quarterly self-care days off, and stock options. We’ll make sure you have the equipment and support you need to work and connect with your teams, at home or in one of our offices.

We have a growth mindset culture that is represented in all that we do, from onboarding through to numerous learning and development initiatives including access to our LinkedIn Learning platform. Employee well-being is also top of mind for us. We host quarterly wellness education sessions to encourage self care and personal growth. From wellness days to ERG-hosted events, we celebrate and energize all 6sense employees and their backgrounds.

Equal Opportunity Employer:

6sense is an Equal Employment Opportunity and Affirmative Action Employers. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. If you require reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to [email protected].

We are aware of recruiting impersonation attempts that are not affiliated with 6sense in any way. All email communications from 6sense will originate from the @6sense.com domain. We will not initially contact you via text message and will never request payments. If you are uncertain whether you have been contacted by an official 6sense employee, reach out to [email protected]