Vulnerability Assessment Automation Engineer

Vulnerability Assessment Automation Engineer

About the role

 hiring for a large financial services client. You will build the automation behind a vulnerability assessment team in cyber threat intelligence. The goal is simple. Assess more vulnerabilities, faster, without adding people at the same rate that volume grows.

What you will do

• Automatically pull in vulnerability disclosures and vendor advisories
• Match them to the organization's technology, including products, versions, configurations, and internet exposure
• Apply the team's risk scoring method consistently
• Flag vulnerabilities that need an emergency response
• Generate summaries and leadership reports

What you bring

• 8+ years in engineering, with 3+ years in security automation
• Strong Python (or similar) and API integration skills
• Experience ingesting CVE and NVD data, vendor advisories, and CISA KEV feeds, and mapping them to an asset inventory or CMDB
• Risk scoring logic, including CVSS, EPSS, exposure, and asset criticality
• Experience generating reports and summaries

Nice to have

• SOAR tools such as Cortex XSOAR, Splunk SOAR, Tines, or Torq
• LLM or GenAI assisted summarization
• ServiceNow integrations
• Attack surface management
• Cloud asset context in AWS or Azure

Preferred certifications

Optional: GCTI, other GIAC certifications, and cloud security certifications

Technology and frameworks

Python, CVE and NVD data, vendor advisories, CISA KEV feeds, asset inventory or CMDB, SOAR (Cortex XSOAR, Splunk SOAR, Tines, Torq), ServiceNow, and AWS or Azure asset context.