At SolarWinds, we’re a people-first company. Our purpose is to enrich the lives of the people we serve—including our employees, customers, shareholders, partners, and communities. Join us in our mission to help customers accelerate business transformation with simple, powerful, and secure solutions.

The ideal candidate thrives in an innovative, fast-paced environment and is collaborative, accountable, ready, and empathetic. We’re looking for individuals who believe they can accomplish more as a team and create lasting growth for themselves and others. We hire based on attitude, competency, and commitment. Solarians are ready to advance our world-class solutions in a fast-paced environment and accept the challenge to lead with purpose. If you’re looking to build your career with an exceptional team, you’ve come to the right place. Join SolarWinds and grow with us!

We work in a hybrid mode 3+2, with a minimum of 3 days at the office (with mandatory Tuesdays and Wednesdays) and a maximum of 2 days at the home office.

The location of our office is Holandská 873/6, Brno – Štýřice, 639 00.

We employ only via an employment contract – full-time employment (HPP).

Overview

We’re looking for a Staff Security Engineer to set technical direction for Threat & Vulnerability Management (TVM) and reduce risk across the enterprise. This is a hands-on technical leadership role: you’ll turn noisy security telemetry into prioritized action, build scalable remediation capabilities, and influence Engineering, IT, Cloud, and Security teams without relying on direct authority.

You’ll evolve TVM beyond scanning and compliance into a measurable, continuous risk-reduction program spanning cloud, infrastructure, endpoints, applications, and software delivery.

What you’ll do

Define the TVM strategy, roadmap, operating standards, and architecture for vulnerability discovery, prioritization, remediation, exceptions, and validation.
Establish risk-based prioritization using exploitability, active exploitation and threat intelligence (including KEV and EPSS), reachability, asset criticality, and business context.
Lead cross-team remediation of urgent and systemic exposures; help engineering teams balance risk, technical debt, and product reliability.
Build integrations and automation across scanners, asset inventories, cloud platforms, CI/CD, ticketing, and security systems to improve ownership, routing, evidence collection, and validation.
Translate emerging threats and MITRE ATT&CK techniques into exposure assessments, hunts, detections, and actionable guidance. Lead rapid zero-day assessments and serve as a Tier 3 escalation point or Incident Commander for major events.
Define executive metrics that show risk reduction—such as remediation time for exploited flaws, mission-critical exposure, asset coverage, and overdue high-risk findings—and communicate clear decisions and trade-offs.
Mentor engineers and establish repeatable practices that improve security outcomes across teams.

What you’ll bring

Extensive experience in security engineering, SecOps, or vulnerability management, with Staff-level technical leadership and organization-wide influence.
Deep hands-on experience with enterprise platforms such as Tenable, Qualys, or Rapid7, and a record of improving the full vulnerability lifecycle.
Experience applying TVM across cloud, containers, endpoints, infrastructure, and CI/CD workflows; familiarity with AWS, Azure, and/or GCP.
Strong risk judgment across exploitability, exposure, asset context, and threat intelligence; able to explain practical risk to engineers and executives.
Ability to automate and analyze security data using Python, PowerShell, SQL, or equivalent, including APIs and data integrations.
Practical knowledge of NIST CSF and MITRE ATT&CK, plus experience leading complex incident or vulnerability response.
Demonstrated ability to influence across teams, mentor others, and build capabilities that scale beyond individual execution.

Preferred

Threat hunting, detection engineering, penetration testing, or exploit-analysis experience; certifications such as CISSP, GCIH, GEVA, CCSP, or a cloud security certification; or equivalent education and experience.