Member of Technical Staff, Vulnerability Management

• Hands-on product security experience, with a strong orientation toward infrastructure software and the security of complex software systems.
• Ability to read source code, debug unfamiliar systems, reproduce reported issues, and explain root cause and practical security impact rather than simply forward findings.
• Strong systems reasoning, including the ability to understand architecture, trust boundaries, deployment assumptions, and how different software components interact.
• Ability to learn vLLM's core architecture and independently manage vulnerability investigations while bringing in maintainers where their expertise is needed.
• Sound prioritization and risk-assessment judgment, with clear documentation of evidence, affected behavior, remediation needs, and next steps.
• Strong written and verbal communication, discretion with sensitive reports, and the ability to work constructively with engineers, researchers, and external security collaborators.

Preferred qualifications

• Experience with vulnerability management and security best practices for open-source infrastructure software.
• Experience coordinating vulnerability resolution across reporters, maintainers, security teams, and software releases.
• Familiarity with vLLM, inference engines, ML infrastructure, or similarly complex distributed software; prior vLLM contributions are helpful but not required.
• Experience preparing security advisories, assessing affected versions, and working with CVE and coordinated-disclosure workflows.
• Experience translating security findings into practical architecture reviews, regression tests, secure development practices, or deployment guidance.

Bonus points if you have

• Helped resolve vulnerabilities in an open-source infrastructure project and can explain your technical contribution and coordination with maintainers.
• Built security tooling or automation that improved investigation quality or reduced repetitive triage work.
• Turned recurring vulnerability patterns into maintainable fixes, tests, or documentation that helped prevent similar issues.

• Location: This role is based in San Francisco, California. Will consider remote in the US for exceptional candidates.
• Compensation: Depending on background, skills, and experience, the expected annual salary range for this position is $200,000 - $400,000 USD + equity.
• Visa sponsorship: We sponsor visas on a case-by-case basis.
• Benefits: Applicable benefits will be confirmed based on the final role location.