[Hiring] Vulnerability Engineer @Domino Data Lab

Role Description

Domino's Security team safeguards a platform trusted by some of the most regulated organizations in the world, across financial services, pharma, government, and defense. Vulnerability Management is where that trust gets tested day to day:

• Finding, triaging, and closing out risk across our OS, container, and dependency surface.
• Providing customers a clear, defensible answer regarding their exposure.
• Working closely with our Staff Security Engineer to turn a fast-growing vulnerability workload into faster, more consistent risk assessments.

Impact

In your first year, your impact will be:

• Faster, more consistent Vulnerability Risk Assessments.
• Validated, trustworthy triage.
• Reliable scanning pipelines.
• Real partnership with Engineering.
• More capacity for the function.

Qualifications

• Hands-on experience managing vulnerabilities for a large SaaS product, across OS, container, and dependency exposure.
• A track record triaging and tracking CVEs for a SaaS or containerized product.
• Experience reproducing and validating reported vulnerabilities.
• Time spent with vulnerability scanning tools such as Prisma Cloud/Twistlock, JFrog, or Trivy.
• Comfort building or maintaining SAST/DAST pipeline automation.
• Experience partnering with Engineering to get fixes prioritized and shipped.
• Background in a highly regulated environment or modern software company.
• Strong scripting ability, Python preferred.
• Working knowledge of CVSS v3.1/v4.0 scoring.
• Exploit development or PoC skills to validate real-world exploitability of CVEs.
• Familiarity with OWASP Top 10 and testing methodology.
• Working knowledge of containers and Kubernetes, plus core Linux, AWS, and networking fundamentals.
• Basic understanding of authentication/authorization concepts and API security fundamentals.
• Basic threat modeling skills.
• Clear communication skills, comfortable navigating risk conversations.
• Comfort operating with ambiguity.

Nice to have

• OSWA, OSWE, or a similar offensive security certification (e.g. GWAPT, GPEN).
• Familiarity with Airflow and Snowflake.

What we value

• A growth mindset and high-performing creative individuals.
• Individuals who seek truth and speak the truth.
• Belief that improvement is always possible.
• Emphasis on an environment of teaching and learning.
• Commitment to growing a diverse team.