Open security roles at SailPoint, and what we know about the team behind them.
information technology & services · 2800 employees · 11 open roles. Updated October 16, 2026.
SailPoint
“SailPoint documents a formal vulnerability management lifecycle: "Vulnerability management is a cyclical process.”
SailPoint
“SailPoint documents a formal vulnerability management lifecycle: "Vulnerability management is a cyclical process.”
SailPoint
“SailPoint documents a formal vulnerability management lifecycle: "Vulnerability management is a cyclical process.”
SailPoint
“SailPoint documents a formal vulnerability management lifecycle: "Vulnerability management is a cyclical process.”
SailPoint
“SailPoint documents a formal vulnerability management lifecycle: "Vulnerability management is a cyclical process.”
SailPoint
“SailPoint documents a formal vulnerability management lifecycle: "Vulnerability management is a cyclical process.”
SailPoint
“SailPoint documents a formal vulnerability management lifecycle: "Vulnerability management is a cyclical process.”
SailPoint
“SailPoint documents a formal vulnerability management lifecycle: "Vulnerability management is a cyclical process.”
SailPoint
“SailPoint documents a formal vulnerability management lifecycle: "Vulnerability management is a cyclical process.”
SailPoint
“SailPoint documents a formal vulnerability management lifecycle: "Vulnerability management is a cyclical process.”
SailPoint
“SailPoint documents a formal vulnerability management lifecycle: "Vulnerability management is a cyclical process.”
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
How they approach application security
“SailPoint documents a formal vulnerability management lifecycle: "Vulnerability management is a cyclical process."The identity-library guidance prescribes regular automated scanning: "regular vulnerability scans using automated tools."”
The team
Job postings indicate a named vulnerability management leadership role: "reports directly to the Head of Vulnerability Management."Team leadership postings state the team owns product security strategy: "Developing and lead the enterprise-wide product security and resilience strategy."Public company leadership: "Heather Gantt-Evans joins the company as chief information security officer
What they're working on
SailPoint's product security roles list S-SDLC program responsibilities: "Participate in expanding/maturing the SailPoint S-SDLC program."Product Security Engineer responsibilities include early developer engagement: "Provide training, guidance, and assistance to development teams early in the SSDLC."Product Security Engineer role includes pipeline/tooling ownership: "Configure, maintain and tune all pipeline and traditional product and application security technologies."Product Security Engineer listing explicitly references common AppSec tools: "Application security testing tools (SAST, DAST, IAST, SCA, or similar.)"The Product Security function participates in incident response: "Be a part of the Product Security Incident Response Team (PSIRT) at SailPoint."Product Security Engineer posting references early SSDLC engagement and training: "Provide training, guidance, and assistance to development teams early in the SSDLC."Product Security Engineers are expected to "support automation and tooling of security technologies to be leveraged by development teams."Job postings describe risk-based prioritization and remediation integrations: "risk-based prioritization"Job postings require ticketing integration and KPIs including MTTR: "KPIs... such as Mean Time to Remediate (MTTR)."Vulnerability Management Analyst duties include "driving the adoption of security automation, vulnerability management with product teams."