Position Summary
We are seeking an experienced Senior Vulnerability Management Engineer to support and enhance an enterprise-wide Vulnerability Management program.
This is a hands-on technical role responsible for managing the complete vulnerability lifecycle, including identification, analysis, risk assessment, prioritization, remediation coordination, validation, and closure.
The successful candidate will work closely with infrastructure, application, cloud, security, and business teams to identify security vulnerabilities, assess their business impact, and drive timely remediation.
The ideal candidate has strong experience with Qualys VMDR, Tenable, Rapid7, or equivalent enterprise vulnerability management platforms, combined with technical expertise in infrastructure security, vulnerability analysis, risk prioritization, and stakeholder coordination.
Required Qualifications
Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Business, or a related field, or equivalent professional experience.
4–8 years of hands-on experience in Vulnerability Management, Security Engineering, Infrastructure Security, or a related cybersecurity discipline.
Demonstrated experience managing the end-to-end vulnerability lifecycle, including identification, triage, risk assessment, remediation tracking, validation, and closure.
Strong hands-on experience with Qualys VMDR, Tenable, Rapid7, or equivalent enterprise vulnerability management platforms.
Strong understanding of CVE, CVSS, CPE, exploitability, vulnerability severity, compensating controls, risk acceptance, and remediation methodologies.
Ability to independently analyze scanner results, investigate vulnerabilities, and recommend practical remediation actions.
Experience managing large volumes of vulnerability findings within complex enterprise environments.
Experience coordinating with infrastructure, application, cloud, and security teams to drive remediation.
Experience validating remediation through rescanning, technical testing, manual reviews, and supporting documentation.
Strong technical understanding of Windows, Linux, networking, servers, databases, middleware, virtualization, and cloud infrastructure.
Knowledge of vulnerability remediation methods, including patching, configuration changes, software upgrades, compensating controls, and service removal.
Experience managing remediation timelines, escalations, risk exceptions, and stakeholder communications.
Strong analytical, troubleshooting, documentation, prioritization, and organizational skills.
Ability to work independently while managing multiple vulnerability remediation initiatives.
Tools & Technologies
Vulnerability Management: Qualys VMDR, Tenable, Rapid7
Risk & Threat Intelligence: CVE, CVSS, CPE, CISA KEV, EPSS, Exploit Intelligence
Cloud Platforms: AWS, Microsoft Azure, Google Cloud Platform
Operating Systems & Infrastructure: Windows, Linux, Servers, Databases, Networking, Virtualization
Security Monitoring: Splunk, Microsoft Sentinel, SIEM, SOAR
ITSM & Reporting: ServiceNow, Jira, CMDB, Power BI
Automation & Integration: Python, PowerShell, REST APIs
Governance: Remediation SLAs, Risk Acceptance, Security Exceptions, Compliance Frameworks
