Senior Vulnerability Management Engineer

Job description

Celonis is the trusted platform to industrialize Enterprise AI. At our core is the Celonis Context Model — which combines process data, business knowledge, and intelligence into a living digital twin of the enterprise that AI can actually understand, turning AI's operational blind spots into operational clarity. World's leading companies trust Celonis and its global ecosystem of partners to make their AI agents, people, systems, and processes work together, achieving transformational outcomes. We believe there's a massive opportunity to unlock global productivity and sustainability by giving AI the context to understand how every business process really works. Join our mission to make processes work for people, companies, and the planet. The Role: Celonis, a leader in Process Mining technology, is looking for an experienced Senior Vulnerability Management Engineer to join our elite Security Engineering Team. This crucial role involves protecting Celonis' cloud-native and on-premise infrastructure through the identification, assessment, and prioritization of security vulnerabilities. The work you’ll do: Execute comprehensive vulnerability scans across various technological domains including network, cloud, and applications. Interpret and triage findings from network scanners, Cloud Security Posture Management (CSPM), Software Composition Analysis (SCA), and Static Application Security Testing (SAST). Provide actionable intelligence and prioritization metrics to remediation teams. Develop and maintain an asset inventory for dynamic scanning requirements. Create executive-level vulnerability metrics and dashboards. Participate in Red Team exercises to identify potential vulnerabilities proactively. The qualifications you need: Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or related field. Minimum of 5 years in a dedicated vulnerability management role. Deep understanding of networking protocols and cloud architectures. Certified Information Systems Security Professional (CISSP) or Certified Ethical Hacker (CEH) certification is a plus. Hands-on experience with premium vulnerability scanning tools such as Qualys, Nessus, or similar. Strong proficiency in CSPM tools like Prisma, Dome9, or similar. Expertise in interpreting SAST results from tools like Checkmarx or Veracode. Excellent scripting skills in Python or Bash for custom vulnerability identification. Visa sponsorship is not offered for this role. What Celonis can offer you: Pioneer Innovation: Work with the global leader in Process Mining and the Process Intelligence Graph to shape the future of AI-driven business operations. Ownership from Day 1: Every full-time "Celonaut" is an owner, receiving Restricted Stock Units (RSUs) and merit-based refresh grants. Unrivaled Family Support: Benefit from our inclusive parental leave policy—24 weeks of fully paid leave for primary carers and 12 weeks for supporting carers, available from your first day of employment. Work-Life Integration: Enjoy Unlimited PTO (in applicable regions) and generous PTO globally, as well as a flexible hybrid work model that balances remote focus with vibrant office collaboration. Continuous Growth: Elevate your skills through our 70-20-10 learning framework, mentorship programs, and access to a dedicated learning platform. Holistic Well-being: Prioritize your health with subsidized Wellhub memberships, mental health counseling, and dedicated "Wellness Weeks" that prioritize work/life balance.</li