At SolarWinds, we’re a people-first company. Our purpose is to enrich the lives of the people we serve—including our employees, customers, shareholders, partners, and communities. Join us in our mission to help customers accelerate business transformation with simple, powerful, and secure solutions.
The ideal candidate thrives in an innovative, fast-paced environment and is collaborative, accountable, ready, and empathetic. We’re looking for individuals who believe they can accomplish more as a team and create lasting growth for themselves and others. We hire based on attitude, competency, and commitment. Solarians are ready to advance our world-class solutions in a fast-paced environment and accept the challenge to lead with purpose. If you’re looking to build your career with an exceptional team, you’ve come to the right place. Join SolarWinds and grow with us!
We work in a hybrid mode 3+2, with a minimum of 3 days at the office (with mandatory Tuesdays and Wednesdays) and a maximum of 2 days at the home office.
The location of our office is Holandská 873/6, Brno – Štýřice, 639 00.
We employ only via an employment contract – full-time employment (HPP).
Overview
We’re looking for a Staff Security Engineer to set technical direction for Threat & Vulnerability Management (TVM) and reduce risk across the enterprise. This is a hands-on technical leadership role: you’ll turn noisy security telemetry into prioritized action, build scalable remediation capabilities, and influence Engineering, IT, Cloud, and Security teams without relying on direct authority.
You’ll evolve TVM beyond scanning and compliance into a measurable, continuous risk-reduction program spanning cloud, infrastructure, endpoints, applications, and software delivery.
What you’ll do
- Define the TVM strategy, roadmap, operating standards, and architecture for vulnerability discovery, prioritization, remediation, exceptions, and validation.
- Establish risk-based prioritization using exploitability, active exploitation and threat intelligence (including KEV and EPSS), reachability, asset criticality, and business context.
- Lead cross-team remediation of urgent and systemic exposures; help engineering teams balance risk, technical debt, and product reliability.
- Build integrations and automation across scanners, asset inventories, cloud platforms, CI/CD, ticketing, and security systems to improve ownership, routing, evidence collection, and validation.
- Translate emerging threats and MITRE ATT&CK techniques into exposure assessments, hunts, detections, and actionable guidance. Lead rapid zero-day assessments and serve as a Tier 3 escalation point or Incident Commander for major events.
- Define executive metrics that show risk reduction—such as remediation time for exploited flaws, mission-critical exposure, asset coverage, and overdue high-risk findings—and communicate clear decisions and trade-offs.
- Mentor engineers and establish repeatable practices that improve security outcomes across teams.
What you’ll bring
- Extensive experience in security engineering, SecOps, or vulnerability management, with Staff-level technical leadership and organization-wide influence.
- Deep hands-on experience with enterprise platforms such as Tenable, Qualys, or Rapid7, and a record of improving the full vulnerability lifecycle.
- Experience applying TVM across cloud, containers, endpoints, infrastructure, and CI/CD workflows; familiarity with AWS, Azure, and/or GCP.
- Strong risk judgment across exploitability, exposure, asset context, and threat intelligence; able to explain practical risk to engineers and executives.
- Ability to automate and analyze security data using Python, PowerShell, SQL, or equivalent, including APIs and data integrations.
- Practical knowledge of NIST CSF and MITRE ATT&CK, plus experience leading complex incident or vulnerability response.
- Demonstrated ability to influence across teams, mentor others, and build capabilities that scale beyond individual execution.
Preferred
Threat hunting, detection engineering, penetration testing, or exploit-analysis experience; certifications such as CISSP, GCIH, GEVA, CCSP, or a cloud security certification; or equivalent education and experience.
Why this role
Shape how the organization reduces vulnerability risk at scale. Measure success by exposure eliminated, stronger remediation practices, and improved readiness for emerging threats—not by the number of reports produced.
Our benefits:
- 25 days of vacation per year
- 3 sick days per year
- 10 study days per year
- 2 volunteering days per year
- 4 weeks’ holidays after 5-year tenure, Sabbatical Leave
- Up to 48 300CZK personal education budget per year
- Pension or life insurance matching donation up to 3% of the salary or 4000 CZK per month
- Cash allowance for meals of 95 CZK per working day
- Unlimited access to LinkedIn Learning
- English/Czech classes
- Multisport card
- Solarian Referral Program
- SolarWinds Appreciation Program
- Giving – Donation Matching
- Employee Assistance
- Competitive Race Reimbursement
- Breakfast on Wednesdays
- Fresh fruits and snacks on Mondays
SolarWinds is an Equal Employment Opportunity Employer. SolarWinds will consider all qualified applicants for employment without regard to race, color, religion, sex, age, national origin, sexual orientation, gender identity, marital status, disability, veteran status or any other characteristic protected by law.
All applications are treated in accordance with the SolarWinds Privacy Notice: https://www.solarwinds.com/applicant-privacy-notice
Skills Required
- Extensive experience in security engineering, security operations, or vulnerability management
- Staff-level technical leadership and organization-wide influence
- Hands-on experience with Tenable, Qualys, Rapid7, or equivalent enterprise vulnerability management platforms
- Experience managing the full vulnerability lifecycle
- Experience applying threat and vulnerability management across cloud, containers, endpoints, infrastructure, and CI/CD workflows
- Familiarity with AWS, Azure, and/or GCP
- Strong risk judgment using exploitability, exposure, asset context, threat intelligence, KEV, and EPSS
- Ability to automate and analyze security data using Python, PowerShell, SQL, or equivalent
- Experience working with APIs and data integrations
- Practical knowledge of NIST CSF and MITRE ATT&CK
- Experience leading complex incident or vulnerability response
- Ability to influence across teams, mentor engineers, and build scalable security capabilities
- Threat hunting, detection engineering, penetration testing, or exploit-analysis experience
- CISSP, GCIH, GEVA, CCSP, cloud security certification, or equivalent education and experience
SolarWinds Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about SolarWinds and has not been reviewed or approved by SolarWinds.
-
Healthcare Strength — Health coverage and related benefits are frequently characterized as solid parts of the package. Feedback suggests medical plans and general perks stand out compared with sentiments about base pay.
-
Leave & Time Off Breadth — Paid time off is often highlighted positively. Feedback suggests time-away policies contribute meaningfully to overall satisfaction with benefits.
-
Wellbeing & Lifestyle Benefits — Wellbeing support, inclusion groups, and a supportive workplace culture are emphasized. Feedback suggests these programs enhance the perceived value of the total rewards package.
SolarWinds Insights
What We Do
SolarWinds is a leading provider of powerful and affordable IT management software. Our products give organizations worldwide—regardless of type, size, or complexity—the power to monitor and manage their IT services, infrastructures, and applications; whether on-premises, in the cloud, or via hybrid models. We continuously engage with technology professionals—IT service and operations professionals, DevOps professionals, and managed services providers (MSPs)—to understand the challenges they face in maintaining high-performing and highly available IT infrastructures and applications. The insights we gain from them, in places like our THWACK® community, allow us to solve well-understood IT management challenges in the ways technology professionals want them solved. Our focus on the user and commitment to excellence in end-to-end hybrid IT management has established SolarWinds as a worldwide leader in solutions for network and IT service management, application performance, and managed services.
