Senior Vulnerability Management Engineer
Core
Own the vulnerability lifecycle from identification and triage through risk evaluation, remediation tracking, escalation, validation, and closure in a complex enterprise environment.
Role type
Senior IC vulnerability management engineer
Builds
Enterprise vulnerability management program and risk-based remediation outcomes
Domain
Cybersecurity / Infrastructure Security
Required skills
Vulnerability lifecycle management, Qualys VMDR, Tenable, Rapid7, CVE/CVSS/CPE analysis, risk assessment, remediation validation, cross-team coordination, technical troubleshooting, documentation, prioritization
Preferred skills
Advanced Qualys VMDR (agent-based assessments), cloud platforms (AWS/Azure/GCP), SIEM/SOAR/CMDB integration, scripting (Python/PowerShell), security frameworks, industry certifications (Security+/CISSP/GIAC)
Technologies
Qualys VMDR, Tenable, Rapid7, AWS, Azure, GCP, Jira, ServiceNow, Splunk, Microsoft Sentinel, Power BI, Linux, Windows
Responsibilities
Manage vulnerability findings from identification and technical triage through remediation, validation, and closure; Analyze scanner results and contextual risk information including CVE, CVSS, CISA KEV, EPSS, and threat intelligence; Investigate findings to establish applicability, affected technology, root cause, severity, and organizational risk; Identify false positives, duplicates, accepted risks, and compensating controls; Track findings against remediation timelines and SLAs and escalate overdue or high-risk vulnerabilities; Validate fixes through rescanning, targeted testing, or manual review; Operate and optimize enterprise vulnerability management platforms; Develop risk-based reporting and metrics; Collaborate with infrastructure, cloud, application security, and business teams; Provide technical guidance and mentorship to junior team members
Seniority
Senior, hands-on IC
