Lead Vulnerability Management Engineer
Core
Leading enterprise-wide initiatives to reduce cybersecurity risk associated with system and application vulnerabilities across cloud, container, and on-prem environments.
Role type
Lead Vulnerability Management Engineer
Builds
Enterprise vulnerability management program and risk-based remediation strategies
Domain
Cybersecurity / Information Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Vulnerability Management, Penetration Testing, Offensive Security, Incident Response, Red Teaming, Security Consulting, Enterprise vulnerability management platforms (Tenable.io, Rapid7, Qualys), Cloud Security Posture Management (CSPM) tools (Wiz, Orca, Prisma Cloud), Cloud platforms (AWS, Azure, GCP), CI/CD pipeline integration, Application Security, Cloud Security, Security Operations
Preferred skills
CISSP certification, Security Operations Center (SOC) experience, Threat Intelligence analysis
Technologies
Tenable.io, Rapid7, Qualys, Wiz, Orca, Prisma Cloud, AWS, Azure, GCP, CI/CD pipelines
Responsibilities
Lead and oversee the full vulnerability management lifecycle, Own and continuously mature the enterprise vulnerability management program, Install, configure, operate, and administer enterprise vulnerability scanning and assessment tools, Ensure scheduled vulnerability scans are executed successfully and provide 100% coverage of intended assets, Configure, optimize, and validate vulnerability scans across new and existing operating systems, platforms, and environments, Leverage threat intelligence and vulnerability data to assess risk, prioritise findings, and respond to emerging adversary techniques, Partner with Engineering, Infrastructure, and Platform teams to ensure effective vulnerability monitoring across cloud and containerised environments, Perform in-depth security and technical analysis of architectures, design decisions, and emerging threats, Research cybersecurity incidents and co-lead vulnerability-related investigations and response activities, Develop clear remediation strategies and communicate risk effectively to technical and non-technical stakeholders, Drive process improvements and develop documentation, including policies, standards, and operating procedures, Provide technical guidance and mentorship within the vulnerability management and broader security team
Seniority
Senior, hands-on IC with program leadership
