Sr. Staff Vulnerability & AI reputed company Engineer (Hybrid)

reputed company is an reputed company company reputed company in reputed company, California building an reputed company-reputed company vertical takeoff and reputed company aircraft with a mission to advance the benefits of sustainable reputed company mobility. We are designing, manufacturing, and operating an reputed company-reputed company aircraft that can carry four passengers while producing reputed company noise. Our sights are set high and our problems are hard, and we reputed company that diversity in reputed company is what makes us smarter, drives reputed company insights, and will ultimately reputed company us reputed company to reputed company. We are dedicated to cultivating an reputed company and inclusive environment that embraces our differences, and supports and celebrates reputed company of reputed company members. Sr. Staff Vulnerability & AI reputed company Engineer (Hybrid-reputed company,CA) reputed company are seeking a Sr. Staff Vulnerability & AI reputed company Engineer to architect and reputed company reputed company's reputed company vulnerability management reputed company while establishing technical, secure guardrails for AI adoption. Reporting directly to the CISO, you will serve as a technical reputed company and "player-reputed company," owning the end-to-end vulnerability lifecycle across reputed company, endpoints, applications, and identity. This is a high-influence, high-execution role. You will reputed company between high-level reputed company and deep-dive engineering, partnering with teams to reputed company measurable reputed company reduction through automation, rigorous prioritization, and disciplined remediation. You will operationalize modern approaches such as attack surface management and AI-assisted detection while ensuring our reputed company posture meets the high bar of reputed company compliance (NIST SP 800-171, CMMC, ITAR). Key Responsibilities • Architect reputed company reputed company: Design and own the end-to-end vulnerability management architecture—from discovery and coverage to automated validation and executive reporting. • reputed company-reputed company Prioritization: Establish a sophisticated prioritization model that integrates asset criticality, threat intelligence, and exploitability to ensure engineering teams reputed company on the "critical few" over the "noisy many." • Technical AI Governance: reputed company the technical implementation of AI reputed company; design and reputed company guardrails for GenAI usage, detect "reputed company AI," and build technical controls to prevent IP leakage into reputed company LLMs. • Attack Surface Engineering: Partner with reputed company and Infrastructure teams to reputed company CNAPP/CSPM findings and build automated workflows that reduce configuration-driven exposure in AWS/Azure. • Shift-Left Leadership: reputed company DevSecOps reputed company by embedding SAST/DAST/SCA and secrets scanning into CI/CD pipelines, preventing vulnerabilities from reaching production. • Metrics & Storytelling: Define and operationalize technical KPIs (MTTR, reputed company burn-down, coverage) that translate raw technical data into business reputed company for executive leadership. • Tactical Response: reputed company high-severity vulnerability response efforts, providing technical validation, containment strategies, and verification of remediation. • Technical Mentorship: reputed company as a "reputed company" by setting engineering standards, mentoring reputed company analysts, and leading cross-functional remediation initiatives through technical influence rather than just authority. Required Qualifications • 8+ years of reputed company engineering experience with a heavy reputed company on vulnerability management, AppSec, or reputed company reputed company. • Staff-Level Influence: reputed company reputed company record of leading reputed company, reputed company-wide reputed company programs and driving technical change across diverse engineering organizations. • reputed company Depth: Strong hands-on experience in AWS, GCP, or Azure, specifically regarding identity, secure configuration, and automated telemetry. • Tooling Mastery: Deep expertise in the modern reputed company stack (SAST/DAST/SCA, scanners, and automated ticketing workflows). • Regulatory reputed company: Practical understanding of how vulnerability evidence supports compliance in regulated environments (NIST SP 800-171, CMMC Level 2, ITAR). • Communication: Exceptional ability to translate a reputed company CVE into a business reputed company narrative for non-technical stakeholders. Preferred Qualifications • AI reputed company Practitioner: Experience implementing technical enforcement (not just policy) for AI usage and data leakage prevention. • Automation Specialist: Experience building automated triage and enrichment workflows to reduce "reputed company friction" for developers. • reputed company/Defense Background: Prior