Senior Security Engineer

We’re in an unbelievably exciting area of tech and are fundamentally reshaping the data storage industry. Here, you lead with innovative thinking, grow along with us, and join the smartest team in the industry. This type of work—work that changes the world—is what the tech industry was founded on. So, if you're ready to seize the endless opportunities and leave your mark, come join us. THE ROLE You will be the architect of risk reduction, transforming raw vulnerability data into a prioritized roadmap for a secure enterprise. Your mission is to move beyond "fixing everything" to strategically eliminating the specific vulnerabilities that pose the highest risk to our global infrastructure. By collaborating across Cloud, DevSecOps, and Product teams, you will ensure our security posture is proactive, measurable, and deeply integrated into our delivery lifecycle. This role is a high-impact opportunity to influence how we define "safe" across a modern, multi-cloud environment. WHAT YOU’LL DO Drive Risk-Based Prioritization: Shift the organization from volume-based reporting to intelligence-driven action by correlating vulnerability data with exploitability, asset criticality, and attack surface exposure to ensure teams focus on what matters most. Operationalize Global Scanning: Lead the end-to-end operation and continuous improvement of enterprise scanning across AWS, Azure, GCP, and containerized environments to maintain 100% visibility of our digital footprint. Enable Cross-Functional Remediation: Partner directly with Infrastructure and Engineering owners to drive remediation efforts against established SLAs, identifying root causes like base-image drift or patching gaps to prevent recurring risks. Integrate Defense Context: Collaborate with Detection and Incident Response teams to map vulnerability classes to active threats, helping determine if known exposures contributed to incidents and identifying where new detections are required. Engineer Operational Excellence: Automate the lifecycle of a vulnerability—from discovery and Jira ticket creation to final reporting—providing leadership with "Fix Impact Reports" that clearly quantify how our security efforts reduce business risk. WHAT YOU BRING Vulnerability Expertise: Professional mastery of the vulnerability lifecycle, including hands-on experience with enterprise scanning platforms (such as Wiz, Tenable, or Prisma) and a deep understanding of CVSS, exploitability, and modern attack paths. Cloud Infrastructure Fluency: Technical proficiency in securing multi-cloud architectures (AWS, Azure, or GCP), containerized workloads, and CI/CD pipelines, alongside a solid grasp of Linux and Windows environment risks. Strategic Communication: The ability to translate complex technical findings into actionable remediation guidance for engineering teams and risk-based narratives for business stakeholders. Operational Mindset: A self-directed approach to problem-solving, with the ability to build scalable processes and automation (using Python or Bash) while navigating incomplete data to improve security systems over time. In-Office Collaboration: We are primarily an in-office environment and therefore, you will be expected to work from the Prague office in compliance with Pure’s policies, unless you are on PTO, or work travel, or other approved leave. WHAT YOU CAN EXPECT FROM US: Innovation : We celebrate those who think critically, like a challenge, and aspire to be trailblazers. Growth : We give you the space and support to grow along with us and to contribute to something meaningful. We have been named Fortune's Best Workplaces in Technology™, Fortune's Best Workplaces in the Bay Area™, and certified as a Great Place to Work®! Team : We build each other up and set aside ego for the greater good. And because we understand the value of bringing your full and best self to work, we offer a variety of perks to manage a healthy balance, including flexible time ... (truncated, view full listing at source)