Docusign · 1 day ago
Lead Security Engineer - Vulnerability Management
Seattle, WA
Full-time
Hybrid
Lead/Staff
$171K/yr - $251K/yr
12+ years expDocusign is a leader in e-signature and contract lifecycle management solutions, serving over 1.5 million customers globally. The Lead Security Engineer will lead the vulnerability management team, focusing on digital surface coverage and collaborating with various teams to mitigate exposure risks. This role involves strategic leadership, automation, and mentoring responsibilities to enhance the company's cybersecurity posture.
Business Process Automation (BPA)Cloud ManagementComputerE-SignatureInformation TechnologySaaSSoftware
Responsibilities
Provide strategic and technical leadership for the infrastructure vulnerability management and external surface coverage program, partnering with stakeholders across the company
Own the vision, develop the strategy, and execute on the plan to operate the program at scale, ensuring continuous improvement and alignment with organizational goals
Analyze public and private vulnerability disclosures and exploit code, deeply understanding and assessing the technical details and potential impact across Docusign’s infrastructure, services, and applications
Investigate, triage, and prioritize vulnerabilities, identifying severity and scope of potential impact, and supporting response and remediation efforts with engineering teams
Engineer high-quality, scalable, and accurate vulnerability detection mechanisms, leveraging automation and advanced tooling
Design, implement, and maintain automation, tools, and workflows to enhance operational capabilities and efficiency
Run external discovery scans with accurate scope, ensuring efficacy, freshness, and deduplication of data, and integrate results with existing reporting mechanisms
Automate ticket assignment with clear context, and track takedown/hardening activities through to closure, maintaining up-to-date exception records and verification artifacts
Develop and maintain scripts and code (Python, Ruby, Go, Swift, Java, .Net, C++, SQL, etc.) for ETL, enrichment, evidence capture, and automation of external scanning processes
Develop and refine OKRs for Surface Coverage areas, and represent the initiative with executive leadership, providing clear metrics and progress updates
Contribute to runbooks, playbooks, and 'how to' documentation, and assist with surge response for high-risk exposures
Participate in a global on-call rotation to ensure continuous monitoring and rapid remediation of vulnerabilities, supporting a 24/7 security posture
Mentor and support the development of team members
Qualification
Required
Bachelor's or Master's degree in Computer Science, Information Security, or a related field, or equivalent practical experience
12+ years of industry experience in cybersecurity, with a focus on coverage, vulnerability management, or related areas
Experience securing cloud platforms (Azure, AWS, GCP), especially public endpoints and security groups
Experience in scripting and programming (Python, Go, or TypeScript) and SQL
Background in infrastructure deployment and management (network, systems)
Experience with DNS providers, CDNs, and WAFs
Experience with coverage or EASM tools (e.g., Microsoft Defender EASM, VirusTotal, Wiz EASM)
Experience with asset inventory and vulnerability management tools (e.g., ServiceNow, Qualys, Tenable)
Strong problem-solving skills and adaptability in a fast-paced environment
Demonstrated ability to mentor and influence team members
Knowledge of internet protocols (DNS, HTTP, TLS), IP/ports, and cloud security concepts
Preferred
8+ years in a vulnerability management program or similar security function
Detail-oriented, metrics-driven, and able to drive initiatives to completion
Excellent communication and stakeholder management skills
Ability to think critically and drive progress despite ambiguity or rapid change
Certifications such as CISSP or CISM
Proven experience as a technical mentor
Experience working with data pipelines and reporting tools to visualize metrics and trends
Benefits
Paid Time Off: earned time off, as well as paid company holidays based on region
Paid Parental Leave: take up to six months off with your child after birth, adoption or foster care placement
Full Health Benefits Plans: options for 100% employer paid and minimum employee contribution health plans from day one of employment
Retirement Plans: select retirement and pension programs with potential for employer contributions
Learning and Development: options for coaching, online courses and education reimbursements
Compassionate Care Leave: paid time off following the loss of a loved one and other life-changing events
Company
Docusign
DocuSign helps small- and medium-sized businesses collect information, automate data workflows, and sign on various devices.
5001-10000 employees
H1B Sponsorship
Docusign has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (361)
2024 (337)
2023 (236)
2022 (249)
2021 (236)
2020 (115)
Funding
Current Stage
Public CompanyTotal Funding
$1.29BKey Investors
Bank of AmericaFounders Circle CapitalGreenspring Associates
2025-05-27Post Ipo Debt· $750M
2018-04-27IPO
2016-10-12Secondary Market
Leadership Team
Allan Thygesen
Chief Executive Officer
Sagnik Nandy
Chief Technology Officer
Recent News
2026-01-22
Company data provided by crunchbase