Member of Technical Staff, Vulnerability Management at Inferact · LumiJobs

Qualification

Hands-on product security experienceAbility to read source codeStrong systems reasoningStrong written and verbal communicationFamiliarity with vLLM

Hands-on product security experience, with a strong orientation toward infrastructure software and the security of complex software systems.
Ability to read source code, debug unfamiliar systems, reproduce reported issues, and explain root cause and practical security impact rather than simply forward findings.
Strong systems reasoning, including the ability to understand architecture, trust boundaries, deployment assumptions, and how different software components interact.
Ability to learn vLLM's core architecture and independently manage vulnerability investigations while bringing in maintainers where their expertise is needed.
Sound prioritization and risk-assessment judgment, with clear documentation of evidence, affected behavior, remediation needs, and next steps.
Strong written and verbal communication, discretion with sensitive reports, and the ability to work constructively with engineers, researchers, and external security collaborators.

Experience with vulnerability management and security best practices for open-source infrastructure software.
Experience coordinating vulnerability resolution across reporters, maintainers, security teams, and software releases.
Familiarity with vLLM, inference engines, ML infrastructure, or similarly complex distributed software; prior vLLM contributions are helpful but not required.
Experience preparing security advisories, assessing affected versions, and working with CVE and coordinated-disclosure workflows.
Experience translating security findings into practical architecture reviews, regression tests, secure development practices, or deployment guidance.
Helped resolve vulnerabilities in an open-source infrastructure project and can explain your technical contribution and coordination with maintainers.
Built security tooling or automation that improved investigation quality or reduced repetitive triage work.
Turned recurring vulnerability patterns into maintainable fixes, tests, or documentation that helped prevent similar issues.

Member of Technical Staff, Vulnerability Management