Vulnerability Security Engineer
Core
Manage enterprise vulnerability management programs, identify/prioritize/remediate security vulnerabilities, and leverage automation/AI to reduce cyber risk.
Role type
Senior IC vulnerability security engineer
Builds
Secure enterprise applications and infrastructure across cloud, network, and endpoint environments
Domain
Cybersecurity / Vulnerability Management
Required skills
vulnerability management, vulnerability scanning, risk prioritization (CVSS/EPSS), stakeholder collaboration, security frameworks (NIST/CIS/PCI-DSS/ISO/SOC2), cloud platforms (AWS/Azure/GCP), automation development, AI-driven security capabilities
Preferred skills
scripting (PowerShell/Python/Bash), ticketing integration (ServiceNow/Jira), application security (SAST/DAST/SCA), professional certifications (Security+/CISSP)
Technologies
Rapid7 InsightVM, Tenable, Qualys, CrowdStrike Exposure Management, ServiceNow, Jira, AWS, Azure, Google Cloud Platform
Responsibilities
Manage enterprise vulnerability management program including identification, assessment, prioritization, and remediation tracking; Perform and maintain vulnerability scanning across servers, endpoints, cloud, network devices, containers, and applications; Analyze scan results to reduce false positives; Partner with infrastructure, cloud, application, and engineering teams to drive timely remediation; Monitor emerging threats and zero-day vulnerabilities; Develop metrics, dashboards, and reporting for leadership; Conduct vulnerability assessments for new technologies and cloud services; Maintain and administer vulnerability management tools; Design and maintain automation solutions; Evaluate and optimize AI-driven security capabilities
Seniority
Senior, hands-on IC