Role: Infrastructure Vulnerability Engineer
Location: Plano TX (Hybrid)
Scope:
· Core responsibilities to include assessing and promoting remediation for all the assets that reside in all the regions and data centers across the globe.
· Candidate will be a key member of the centralized information security team.
What you’ll do:
· Run authenticated and agent-based vulnerability scans across on-prem, cloud, and container environments, and report findings.
· Publish vulnerability status reports and dashboards to senior management and track remediation against defined SLAs.
· Define and participate in implementation of On-prem and Cloud architecture and security controls.
· Proactively identify emerging threats and actively exploited vulnerabilities, and prioritize remediation using risk context (CVSS, EPSS, CISA KEV, asset criticality).
· Partner with infrastructure, cloud, and application teams to drive remediation, validate fixes, and manage risk exceptions.
· Maintain security by monitoring and ensuring compliance to standards, policies, and procedures; conducting incident response analyses; developing and conducting training programs.
· Identify gaps in scan coverage and asset inventory, and recommend tooling and process improvements, including automation.
· Participate in and assist with incident response team, as appropriate.
· Generate metrics (e.g., mean time to remediate, SLA compliance, risk trends) for management as needed.
· Prepare system security reports by collecting, analyzing, and summarizing data and trends.
What we are looking for:
· 3–5 years of experience in information security, vulnerability management, or penetration testing; a relevant master’s degree may substitute for up to two years of experience.
· Experience in vulnerability and threat management, including gathering and condensing threat intelligence into actionable and meaningful communication materials.
· Bachelor’s degree in information security, information technology, computer science, or a related STEM field, or equivalent practical experience.
· Working knowledge of network security architecture, segmentation, and secure configuration.
· Solid understanding of network, system, and endpoint security.
· Experience with public cloud platforms (AWS, Microsoft Azure, Google Cloud) and cloud security tooling such as CSPM/CNAPP (e.g., Wiz, Prisma Cloud, Microsoft Defender for Cloud).
· Familiarity with security frameworks and regulatory requirements such as NIST CSF 2.0, CIS Controls, ISO 27001/27002, and SOC 2 (SSAE 18).
· Hands-on experience with modern vulnerability management platforms
· Practical experience with the development, implementation, and management of security related technologies (e.g., SIEM, EDR, WAF, next-generation firewalls, internet-facing services).
· Excellent customer service including strong written and oral communication skills.
· Familiarity with container and Kubernetes security, infrastructure as code (e.g., Terraform), and scripting (Python or PowerShell) to automate scanning, ticketing, and reporting.
· Demonstrated understanding of information security concepts, standards, practices, including but not limited to firewalls, intrusion prevention and detection, TCP/IP and related protocols, device monitoring and log management and event monitoring/reporting.
· Certifications such as CompTIA Security+ or CySA+, GIAC (e.g., GCIH, GPEN), OSCP, or a cloud security certification (e.g., AWS Certified Security – Specialty, Microsoft AZ-500) are a plus.
· Results-focused, with strong attention to detail.
Ability to work a second shift that overlaps with customer hours
