Senior Vulnerability Management Engineer

As a Senior Vulnerability Management Engineer, you will serve as a technical leader within the Cybersecurity organization, helping drive enterprise vulnerability management, asset visibility, exposure analysis, and remediation effectiveness across on-premises, cloud, and hybrid environments.

This role combines hands-on vulnerability management platform expertise with strong knowledge of network architecture, asset discovery, vulnerability analysis, and the end-to-end remediation lifecycle. You will ensure broad and reliable vulnerability coverage, identify visibility gaps, translate technical findings into actionable guidance, and partner with technology teams to focus remediation on the assets and vulnerabilities that present the greatest actual risk.

Responsibilities
Own and optimize enterprise vulnerability scanning across on-premises, cloud, endpoint, and network environments, including scanners, agents, scan policies, schedules, credentials, platform health, upgrades, and integrations.
Analyze scan coverage and troubleshoot gaps related to asset discovery, authentication, agent deployment, scanner placement, routing, firewall rules, network segmentation, and onboarding.
Maintain accurate vulnerability asset visibility by identifying unmanaged, duplicate, stale, or improperly classified assets and resolving asset-correlation and data-quality issues.
Develop and maintain asset tagging and classification strategies that support ownership, prioritization, reporting, and remediation workflows.
Analyze critical and high-risk vulnerabilities using exploitability, reachability, threat intelligence, asset criticality, internet exposure, compensating controls, and business context.
Identify vulnerabilities and assets requiring prioritized remediation and provide clear technical recommendations to infrastructure, network, cloud, database, application, and endpoint teams.
Support vulnerability triage, false-positive validation, assignment and ownership resolution, rescans, remediation verification, and recurring-issue analysis.

Required experience, education, and skills
Bachelor s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field, or equivalent practical experience.
Five or more years of experience in vulnerability management, security engineering, infrastructure engineering, network engineering, or a related cybersecurity discipline.
Hands-on experience administering and optimizing enterprise vulnerability management platforms, scanners, agents, policies, credentials, and integrations.
Experience designing, operating, and troubleshooting credentialed and unauthenticated vulnerability scans across Windows, Linux, network, and cloud environments.
Strong understanding of TCP/IP, DNS, routing, firewalls, load balancers, network segmentation, authentication, and common enterprise infrastructure.
Experience analyzing vulnerability findings, validating false positives, prioritizing risk, and supporting remediation through closure.
Ability to translate complex vulnerability and network information into clear, actionable guidance for technical and non-technical stakeholders.
Strong analytical, troubleshooting, collaboration, documentation, and communication skills.

Preferred experience and skills
Experience with Tenable Vulnerability Management (not required), Nessus scanners, Nessus Agents, Wiz, and ServiceNow Vulnerability Response or Unified Security Exposure Management.
Experience with exposure management, attack-surface analysis, exploitability assessment, threat intelligence, and risk-based vulnerability prioritization.
Experience supporting AWS, Azure, hybrid cloud, virtualized, containerized, or ephemeral infrastructure.
Experience integrating vulnerability platforms with ServiceNow, SIEM, privileged-access, asset-management, cloud, or automation technologies.
Experience developing automation with PowerShell, Python, REST APIs, Bash, Ansible, or similar technologies.
Relevant cybersecurity or vulnerability management certifications.

Remote position. Remote candidates can apply.