Vulnerability Management Engineer

Job Title: Vulnerability Management Engineer

Location: Remote USA

Position: Direct Hire

Join a Top Ranked Healthcare Institution

Overview

TalentFish is casting a line for a Vulnerability Management Engineer. This is a full-time hire position open to remote consideration in the U.S. The Vulnerability Management Engineer / Offensive Security Analyst will assist in safeguarding our healthcare client s digital environment by proactively identifying and addressing security risks through vulnerability management, penetration testing, and offensive security operations.

What You Bring to the Role. (Ideal Experience)

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent internship/work experience.
• 3 5+ years of experience in vulnerability management.
• Well-rounded understanding of vulnerability management concepts.
• Strong understanding of networking, Windows/Linux operating systems, and web technologies.
• Experience with vulnerability management and scanning tools such as Rapid7 InsightVM, Burp Suite, ProjectDiscovery, NodeZero, Nessus, Qualys, or similar. Experience with Rapid7 is preferred.
• Familiarity with penetration testing, vulnerability validation, red/purple team exercises, and/or offensive security methodologies.
• Security+, CEH, PNPT, GPEN, GSEC, OSCP or similar certifications preferred.
• Strong analytical and communication skills.
• Eagerness to learn and grow in offensive security.
• Healthcare industry experience is a plus.

What You'll Do. (Skills Used in this Position)

• Assist in executing vulnerability scans and monitoring scan results.
• Support triaging and prioritizing vulnerabilities for remediation.
• Identify asset and application owners and coordinate patching efforts.
• Assess and communicate vulnerability risk.
• Participate in vulnerability validation and testing.
• Contribute to red team and purple team exercises.
• Document findings and assist in preparing reports.
• Maintain scanning application configuration.
• Collaborate with team members and other departments to improve security.
• Stay informed about basic cybersecurity threats and vulnerabilities.
• Manage and maintain exceptions for scanning and vulnerability patching.

Compensation and Employment

This role requires authorization to work in the U.S. without current or future visa sponsorship. The expected salary range for this position is $118k - $130k per year, depending on experience and qualifications. This role qualifies for full comprehensive employee benefits such as health insurance, 401(k), paid time off and more. TalentFish is committed to pay transparency and equal opportunity. The salary range provided is in compliance with applicable state and federal regulations. All offers are contingent upon the completion of a background check, which may include but is not limited to reference checks, education verification, employment verification, drug testing, criminal records checks, and any required certifications or compliance requirements based on applicable laws. TalentFish is an employee-owned company pioneering a new realm in talent acquisition.
TalentFish focuses on providing the best employee, consultant, and client experience possible. We are redefining IT staffing by evolving AI, video screening, and our unique platform. At TalentFish we are an Equal Opportunity Employer; we embrace and encourage diversity.