[Hiring] Security Platform Engineer @Sparix Global.

Role Description

We are seeking a Security Platform Engineer specializing in Tool Configuration and Data Unification to bring deep security domain expertise to the hands-on configuration of our scanning and aggregation stack. This role is responsible for unifying the output of multiple security scanners into a single, coherent vulnerability language. You will tune what each tool detects, define how findings are normalized and deduplicated, and design the data model that transforms raw scanner output into defensible, evaluated vulnerability records.

Working alongside DevSecOps engineers and GRC engineers, you will own the intelligence and structure of the security data pipeline—determining what flows through it and how it is shaped—to support FedRAMP compliance, audit evidence requirements, and actionable vulnerability management at scale.

Key Responsibilities

• Own scanner configuration and tuning across the detection fleet:
• Scan policies
• Coverage scope
• Severity mappings
• Signal quality for:
• Trivy
• Semgrep
• Qualys
• Tenable
• AWS Inspector
• CrowdStrike
• Dependabot
• Design the deduplication and correlation strategy in DefectDojo, including:
• Keying logic that recognizes the same vulnerability across:
• Image scans
• Runtime scans
• Host scans
• Dependency scans
• Grouping rules that collapse duplicate findings into single actionable issues
• Target: ~70% ticket reduction
• Define the unified findings data model, including:
• Field schema
• Asset identity
• Component mapping
• Support the FedRAMP reporting requirements:
• 11-field vulnerability detail schema
• 8-field accepted-vulnerability reporting schema
• Build the reachability signal layer using:
• AWS Reachability Analyzer
• Service mesh
• eBPF-based signals
• Feed internet-reachability determinations (IRV/NIRV) per finding.
• Configure runtime visibility using CrowdStrike Falcon Cloud Security.
• Reconcile runtime observations against image scan results to eliminate the rebuilt-but-not-redeployed gap.
• Partner with GRC engineers to ensure the data model captures all information required by the:
• LEV × IRV × PAIN evaluation engine
• Audit evidence requirements
• Validate detection coverage across:
• Containers
• Hosts
• Serverless environments
• Dependencies
• External attack surface
• Identify security blind spots.

Qualifications

• 6+ years of Security Engineering experience with hands-on vulnerability management.
• Strong understanding of:
• CVEs
• CPE/PURL identity
• Scanner false positives
• Scanner disagreement analysis
• Experience configuring and tuning multiple commercial and open-source security scanners in production.
• Strong data modeling skills for:
• Normalization
• Deduplication
• Enrichment
• Asset correlation
• AWS cloud security expertise, including:
• Container security
• Image scanning
• Registry policy
• Runtime security
• EKS
• ECS
• Working knowledge of:
• CISA KEV
• EPSS
• VEX
• Vulnerability prioritization
• Hands-on experience with:
• Trivy
• Semgrep
• Qualys
• Tenable
• AWS Inspector
• CrowdStrike
• Dependabot
• Experience with DefectDojo for vulnerability aggregation and deduplication.

Preferred (Bonus) Skills

• Deep DefectDojo experience, including:
• Deduplication engine
• Parsers
• API
• Experience with network reachability analysis:
• AWS Reachability Analyzer
• Service mesh telemetry
• eBPF tooling
• Familiarity with FedRAMP concepts:
• VDR/VER
• LEV (Likely Exploitable)
• IRV/NIRV (Internet-Reachable / Non-Internet-Reachable)
• PAIN ratings
• Timeframe classes
• Experience writing custom scanner parsers or findings transformation code in Python.