Senior Engineer, Exposure & Vulnerability Management

The posting, as Recursion wrote it

Your work will change lives. Including your own.

The Impact You’ll Make

Help shift Recursion from periodic scans to continuous, risk-driven exposure management. You’ll build multi-agent systems that take vulnerabilities from discovery to verified closure, with approval gates, audit trails, and rollback built in. You’ll replace static CVSS scores with prioritization based on reachability, attack paths, business criticality, and live exploit intelligence, so engineering teams can focus on what’s actually exploitable. By integrating remediation into ticketing and CI/CD and partnering with Engineering and IT to make secure-by-default the norm, you’ll shrink our attack surface and speed up fixes where risk is highest, helping Recursion keep decoding biology with confidence.

In this role, you will

• Design and deploy multi-agent systems that take an exposure from discovery to closure: analyzing it from the outside in, mapping dependencies from the inside out, generating the patch or Infrastructure-as-Code (IaC) update, and validating the result. Build in approval gates, audit trails, and rollback so every automated change gets the level of review its risk calls for.
• Move prioritization beyond static CVSS scores by building engines that rank exposures on real-time reachability, attack-path context, business criticality, and live exploit intelligence.
• Cut through alert noise with automated verification that separates theoretical flaws from actively exploitable conditions, so engineering and DevOps teams can focus on the issues that matter.
• Drive our Continuous Threat Exposure Management (CTEM) strategy, shifting the organization from periodic scans to a proactive, around-the-clock security posture across products, platforms, cloud and on-premise infrastructure, and corporate applications.
• Assess the current state of our exposure and vulnerability management program and revamp the strategy to accelerate key business outcomes and support our broader zero-trust security approach.
• Architect cloud-native discovery, asset-inventory, and remediation workflows, and integrate them with ticketing, CI/CD, and configuration management so fixes reach owners and ship without manual hand-offs.
• Partner with Engineering and IT to embed secure-by-default practices into how products and applications are built, deployed, and patched, with remediation timelines matched to real risk.
• Define KPIs, KCIs, and KRIs (for example mean time to remediate, exploitable-exposure backlog, and coverage of critical assets) that show how well controls are working and guide continuous improvement.
• Support regulatory compliance by working with partner teams to design exposure and vulnerability controls that meet standards such as SOC2.

The Team You’ll Join

You will join a growing Information Security team at Recursion, focused on enabling Recursion to decode biology by providing world class secure technology services that are designed and fit for purpose. Y
[…]
Recursion is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other characteristic protected under applicable federal, state, local, or provincial human rights legislation.

Accommodations are available on request for candidates taking part in all aspects of the selection process.

Recursion leverages AI in our hiring process. We use Greenhouse's Talent Matching AI technology feature to help review applications against the skills and experience we've identified as important for this role. It analyzes your resume and application responses to assess how closely your qualifications match our criteria - but all decisions are made by our human recruiters and hiring managers, including whether to move to the next phase of review. Talent Matching does not automatically advance or reject any candidate. By submitting your application, you acknowledge that you have been informed about and consent to this use of the Talent Matching tool in our review process. Please refer to our Recursion Privacy Policy at https://www.recursion.com/privacy-notice/ for more information about our processing of personal data and your rights.

Recruitment & Staffing Agencies: Recursion Pharmaceuticals and its affiliate companies do not accept resumes from any source other than candidates. The submission of resumes by recruitment or staffing agencies to Recursion or its employees is strictly prohibited unless contacted directly by Recursion’s internal Talent Acquisition team. Any resume submitted by an agency in the absence of a signed agreement will automatically become the property of Recursion, and Recursion will not owe any referral or other fees. Our team will communicate directly with candidates who are not represented by an agent or intermediary unless otherwise agreed to prior to interviewing for the job.