vulnerability management engineer in Juno Beach, FL

Role: Vulnerability Management Engineer

Duration: Longterm

Location: Juno Beach, FL

1. Vulnerability Operationalization
Coordinate with vulnerability scanning teams to initiate remediation activities with business units.
Perform regular vulnerability assessments across systems, applications, and networks to identify security weaknesses and potential risks.
Analyze assessment results, prioritize findings based on risk, and collaborate with remediation teams to ensure timely resolution.
Track and monitor remediation progress across all environments.
Conduct regular cadence meetings with remediation teams to review status and address blockers.

2. Risk Treatment and Remediation
Develop and maintain processes for risk treatment and remediation management.
Execute the risk treatment lifecycle: consolidate remediation plans, track closure, and validate exceptions.
Identify and document prioritized corrective actions or compensating controls.
Collaborate with patching teams and business units to verify remediation effectiveness through retesting and evidence validation.

3. Oversight and Reporting
Implement governance and reporting frameworks for vulnerability management and penetration testing.
Provide stakeholders with real-time visibility into testing schedules, results, remediation progress, and risk indicators.
Develop dashboards and executive summaries to communicate security posture.
Track performance metrics such as SLA adherence, recurring vulnerabilities, and remediation efficiency.
Conduct periodic review meetings to identify blockers and define improvement actions.
Ensure traceability from vulnerability discovery through remediation and closure.

What are the top 3 skills required for this role?

Vulnerability Management Expertise

Strong understanding of vulnerability scanning tools, remediation workflows, and lifecycle management.

Proficient in Qualys and Tenable VM tools - Vulnerability remediation tracking reports, mitigation guidance and dashboards.

Risk Analysis & Governance

Ability to assess risk, document treatment plans, manage exceptions, and ensure compliance with security standards.

Knowledge of risk treatment frameworks, process documentation, exception logs and compensating controls.

Stakeholder Communication & Reporting

Skilled in creating dashboards, executive summaries, and conducting cadence meetings to drive remediation progress and report metrics.

Ability to coordinate across multiple teams (IT, security, business units).