Lead Application Security Engineer

We’re looking for problem solvers, innovators, and dreamers who are searching for anything but business as usual. Like us, you’re a high performer who’s an expert at your craft, constantly challenging the status quo. You value inclusivity and want to join a culture that empowers you to show up as your authentic self. You know that success hinges on commitment, that our differences make us stronger, and that the finish line is always sweeter when the whole team crosses together.

As a Lead Vulnerability Management Engineer, you will be responsible for leading enterprise-wide initiatives to reduce cybersecurity risk associated with system and application vulnerabilities. You will play a key role in governing, scaling, and maturing Alteryx’s vulnerability management program while partnering closely with Engineering, IT, and Security teams to drive risk-based remediation across cloud, container, and on-prem environments.

This role combines deep technical expertise with program leadership, threat analysis, and cross-functional influence.

Key Responsibilities:

• Lead and oversee the full vulnerability management lifecycle, including identification, triage, prioritisation, remediation tracking, and verification.

• Own and continuously mature the enterprise vulnerability management program, ensuring alignment with organisational risk tolerance and security strategy.

• Install, configure, operate, and administer enterprise vulnerability scanning and assessment tools.

• Ensure scheduled vulnerability scans are executed successfully and provide 100% coverage of intended assets.

• Configure, optimize, and validate vulnerability scans across new and existing operating systems, platforms, and environments.

• Leverage threat intelligence and vulnerability data to assess risk, prioritise findings, and respond to emerging adversary techniques.

• Partner with Engineering, Infrastructure, and Platform teams to ensure effective vulnerability monitoring across cloud and containerised environments.

• Perform in-depth security and technical analysis of architectures, design decisions, and emerging threats.

• Research cybersecurity incidents and co-lead vulnerability-related investigations and response activities.

• Develop clear remediation strategies and communicate risk effectively to technical and non-technical stakeholders.

• Drive process improvements and develop documentation, including policies, standards, and operating procedures.

• Provide technical guidance and mentorship within the vulnerability management and broader security team.

Required Qualifications:

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience.

• 9+ years of experience in Information Security or IT roles, with demonstrated expertise in one or more of the following areas:

  • Vulnerability Management

  • Penetration Testing or Offensive Security

  • Incident Response

  • Red Teaming or Security Consulting

• Extensive experience with enterprise vulnerability management platforms such as Tenable.io, Rapid7, Qualys, or equivalent.

• Hands-on experience with Cloud Security Posture Management (CSPM) tools such as Wiz, Orca, Prisma Cloud, or similar.

• Proven track record of leading vulnerability remediation programs in complex, enterprise environments.

• Strong critical thinking, risk-based decision-making, and problem-solving skills.

• Ability to communicate complex security risks clearly to executive, technical, and non-technical stakeholders.

Preferred Qualifications (Bonus):

• Industry-recognized security certifications such as CISSP or equivalent.

• Strong knowledge of major cloud platforms including AWS, Azure, or GCP.

• Experience integrating security requirements into CI/CD pipelines and the Software Development Lifecycle (SDLC).

• Background in Application Security, Cloud Security, or Security Operations, including associated security tooling.

Find yourself checking a lot of these boxes but doubting whether you should apply? At Alteryx, we support a growth mindset for our associates through all stages of their careers. If you meet some of the requirements and you share our values, we encourage you to apply. As part of our ongoing commitment to a diverse, equitable, and inclusive workplace, we’re invested in building teams with a wide variety of backgrounds, identities, and experiences.

This position involves access to software/technology that is subject to U.S. export controls. Any job offer made will be contingent upon the applicant’s capacity to serve in compliance with U.S. export controls.