Search Jobs | Dice.com

21 results (1 new)

Group by company

Cyber Vulnerability Management Engineer CVE

Request Technology, LLC

Remote • 15d ago

Easy Apply

Contract

Depends on Experience

Contract to Hire - Vulnerability Management Engineer

Request Technology, LLC

Remote • 15d ago

Easy Apply

Contract

Depends on Experience

Vulnerability Management Engineer

CACI International, Inc.

Washington • Today

Full-time

USD 75,200.00 - 158,100.00 per year

Staff Vulnerability Management Engineer

Chainguard

Remote • Today

Full-time

USD 170,000.00 - 231,000.00 per year

Sr Vulnerability Management Engineer

Solventum

Remote or Minnesota • Today

Full-time

USD 143,200.00 - 196,900.00 per year

Software Engineer, Vulnerability Management

Stripe

Remote • Today

Full-time

Endpoint Management & Vulnerability Remediation Engineer

Lumen Solutions Group Inc.

Remote • Today

Easy Apply

Contract

Depends on Experience

Cybersecurity Engineer - Web/Application Vulnerability Management

CALIBRE

Remote • Today

Full-time

Senior Staff Security Engineer, Vulnerability Management

ZocDoc

Remote • Today

Full-time

USD 200,000.00 - 290,000.00 per year

Senior Security Engineer, Vulnerability Management, PSIRT

1Password

Remote or Canada, Kentucky • Today

Full-time

USD 153,000.00 per year

Cybersecurity Engineer I/II (Vulnerability & Patch Management) (Remote - US)

BNSF Railway Company

Remote • Today

Full-time

USD 93,750.00 - 175,000.00 per year

Engineer III, Vulnerability Management

Cencora

Remote or Philadelphia, Pennsylvania • Today

Full-time

Site Reliability Engineer FedRAMP Vulnerability Management

Lorven Technologies, Inc.

Remote • 4d ago

Easy Apply

Third Party, Contract

$47 - $47

Jr. Site Reliability Engineer FedRAMP Vulnerability Management

Lorven Technologies, Inc.

Remote • 4d ago

Easy Apply

Third Party, Contract

$47 - $47

Senior Software Engineer, Java | Vulnerability

NinjaOne

Remote or Texas • 4d ago

Full-time

USD 140,000.00 - 200,000.00 per year

Network Security Microsegmentation Engineer

System One

Remote • 9d ago

Easy Apply

Contract

Depends on Experience

AI Product Owner (DevSecOps + vulnerabilities + Security + AI interest)

Javen Technologies, Inc

Remote • 11d ago

Easy Apply

Contract

Depends on Experience

AI Scanning Product Owner

Eliassen Group

Remote or Almont, Colorado • Today

Contract

DevSecOps Architect

TekLeaders, Inc

Remote • Today

Easy Apply

Full-time, Part-time, Third Party, Contract

Job Title: Information Security Engineer - Vulnerability Management III

Hudson IT

Remote or Cincinnati, Ohio • Today

Full-time

Staff Cloud Security Engineer- Vulnerability Management

CVS Health

Remote • Today

Full-time

USD 118,450.00 - 236,900.00 per year

Job Details

Skills

Cyber Security Infrastructure Engineer and Architect
Cyber Vulnerability Management Engineer CVE

Summary

***We are unable to sponsor for this 4+ month contract role, possible CTH, no 3rd party candidates will be considered***

Prestigious Enterprise Company is currently seeking a Cyber Vulnerability Management Engineer with strong CVEs experience. Candidate will provide hands-on support for the Secure Technology Solutions Sustainability service by augmenting the existing vulnerability management team in executing core vulnerability management operations. This is a senior-level technical role requiring strong vulnerability analysis, infrastructure knowledge, sound technical judgment, and the ability to work effectively with both engineering teams and technology leadership. This role will primarily support vulnerabilities affecting enterprise infrastructure, middleware, platforms, and DevOps technologies.

Responsibilities:

Vulnerability Investigation & Validation

Investigate and validate vulnerabilities identified through enterprise vulnerability scanning and aggregation platforms, including Rapid7 InsightVM/Nexpose, Qualys, and Nucleus.
Perform technical analysis beyond scanner output to determine whether vulnerabilities are valid, applicable, exploitable, or otherwise relevant within the context of the affected environment.
Research CVEs, vendor advisories, security bulletins, affected versions, patches, mitigations, exploitability, and other technical information necessary to accurately assess vulnerability risk.
Analyze affected infrastructure, middleware, operating systems, network technologies, platforms, and DevOps technologies to understand vulnerability applicability and appropriate remediation.
Identify potential false positives, configuration issues, version discrepancies, or other conditions requiring additional investigation.
Work directly with technical teams to gather evidence, validate findings, troubleshoot discrepancies, and determine appropriate remediation or mitigation approaches.

Vulnerability Management Operations

Execute established vulnerability management processes and runbooks consistently and independently.
Provide backup support for day-to-day and on-call vulnerability management activities, including investigation and coordination of newly identified or time-sensitive vulnerabilities.
Triage vulnerability findings and determine appropriate actions based on severity, exposure, exploitability, affected technology, and established enterprise requirements.
Create and distribute vulnerability advisories that clearly communicate affected technologies, risk, required actions, remediation guidance, and timelines.
Create, route, track, and follow up on remediation tickets with responsible technology teams.
Monitor outstanding vulnerability work and proactively engage stakeholders to drive remediation to completion.
Support both newly identified vulnerabilities and existing vulnerability backlog as needed.
Maintain accurate records and documentation throughout the vulnerability lifecycle.

Risk Acceptance

Facilitate established vulnerability risk acceptance processes for findings that cannot be remediated within required timelines.
Work with technical teams to understand remediation constraints, compensating controls, exposure, and residual risk.
Review existing risk acceptances approaching expiration and coordinate remediation, renewal, or escalation as appropriate.
Ensure risk acceptance documentation is technically accurate, clearly written, and completed in accordance with established processes and approval requirements.
Communicate effectively with engineers, managers, and technology leadership regarding vulnerability risk and remediation decisions.

Qualifications:

Significant hands-on experience in vulnerability management, vulnerability analysis, infrastructure security, or a closely related security engineering discipline.
Senior-level understanding of vulnerabilities, including CVEs, CVSS, vulnerability applicability, exploitability, remediation, mitigation, and false-positive validation.
Demonstrated ability to independently investigate and validate vulnerability findings rather than relying solely on vulnerability scanner results or severity ratings.
Strong technical understanding of enterprise infrastructure, including operating systems, networking, middleware, servers, common enterprise platforms, and related technologies.
Experience with enterprise vulnerability scanning and/or vulnerability management platforms such as Rapid7 InsightVM/Nexpose, Qualys VM, Nucleus, or comparable technologies.
Ability to research and interpret vendor security advisories, CVE information, scanner evidence, software versions, patches, configurations, and other technical data when assessing vulnerability findings.
Experience coordinating vulnerability remediation with infrastructure, platform, middleware, DevOps, or other technical engineering teams.
Ability to learn and consistently execute established operational processes and runbooks with minimal oversight.
Strong organizational skills and ability to independently manage multiple concurrent vulnerability investigations, remediation efforts, and stakeholder interactions.
Excellent written and verbal communication skills.
Strong interpersonal and relationship-management skills, with demonstrated ability to work effectively with both highly technical engineers and technology leadership.

Preferred Skills:

Direct experience with Rapid7 InsightVM/Nexpose, Nucleus, and/or Qualys Vulnerability Management.
Experience supporting enterprise-scale vulnerability management programs and large, heterogeneous technology environments.
Experience managing vulnerability advisories, remediation ticketing workflows, vulnerability exceptions, and/or formal risk acceptance processes.
Experience investigating vulnerabilities affecting middleware, infrastructure platforms, network technologies, operating systems, containers, or DevOps tooling.
Familiarity with vulnerability intelligence sources, exploitability analysis, CISA KEV, EPSS, vendor advisories, and other risk-prioritization inputs.
Experience working within defined vulnerability remediation SLAs and escalation processes.
Familiarity with workflow/ticketing platforms such as Jira or Ivanti.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: napil006
Position Id: CJ-VulCA
Posted 15 days ago

Fitment

Dice Job Match Score™

🔢 Crunching numbers...

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Remote

•

15d ago

Contract to Hire Vulnerability Management Engineer Rate: open Location: Remote Duration: 4 months CTH *We are unable to provide sponsorship for this role* Qualifications Senior-level experience with high understanding of vulnerabilities, including CVEs, CVSS, vulnerability applicability, exploitability, remediation, mitigation, and false-positive validation.Demonstrated ability to independently investigate and validate vulnerability findings rather than relying solely on vulnerability scanner r

Easy Apply

Contract

Depends on Experience

Security - Vulnerability Management - CVE

Remote

•

15d ago

Contract Vulnerability Management BILL RATE: $110.00 - $125.00/hour LOCATION: remote possible contract to hire, 3-4 month if hired, CANNOT be in these states: Washington DC, AK, ND, NE, HI, OK, VT, ME, WY, NH, Puerto Rico SELLING POINTS: vulnerability management, vulnerability analysis - CVEs CVSS. management operating systems linux windows cloud azure networking middleware servers rapid7 insight vm nexpose qualys vm This is a senior-level technical role requiring strong vulnerability analysis,

Easy Apply

Full-time

$110 - $125

Engineer III, Vulnerability Management

Remote or Philadelphia, Pennsylvania

•

Today

Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere. Apply today! Job Details Job Summary The Engineer - Vulnerability Management is a senior technical contributor responsible for id

Full-time

Staff Vulnerability Management Engineer

Remote

•

Today

Chainguard is the trusted source for open source. By delivering hardened, secure, and production-ready builds of all the open source software engineers and AI agents rely on, Chainguard helps organizations build faster, stay compliant, and eliminate risk. Our customers include Fortune 500 enterprises and global industry leaders, including Anduril, Canva, Fortinet, Hewlett Packard Enterprise, OpenAI, Snap Inc., and Snowflake. Chainguard is venture-backed by leading investors, including Amplify, I

Full-time

USD 170,000.00 - 231,000.00 per year

Job Details

Skills

Cyber Security Infrastructure Engineer and Architect
Cyber Vulnerability Management Engineer CVE

Summary

***We are unable to sponsor for this 4+ month contract role, possible CTH, no 3rd party candidates will be considered***

Responsibilities:

Vulnerability Investigation & Validation

Investigate and validate vulnerabilities identified through enterprise vulnerability scanning and aggregation platforms, including Rapid7 InsightVM/Nexpose, Qualys, and Nucleus.
Perform technical analysis beyond scanner output to determine whether vulnerabilities are valid, applicable, exploitable, or otherwise relevant within the context of the affected environment.
Research CVEs, vendor advisories, security bulletins, affected versions, patches, mitigations, exploitability, and other technical information necessary to accurately assess vulnerability risk.
Analyze affected infrastructure, middleware, operating systems, network technologies, platforms, and DevOps technologies to understand vulnerability applicability and appropriate remediation.
Identify potential false positives, configuration issues, version discrepancies, or other conditions requiring additional investigation.
Work directly with technical teams to gather evidence, validate findings, troubleshoot discrepancies, and determine appropriate remediation or mitigation approaches.

Vulnerability Management Operations

Execute established vulnerability management processes and runbooks consistently and independently.
Provide backup support for day-to-day and on-call vulnerability management activities, including investigation and coordination of newly identified or time-sensitive vulnerabilities.
Triage vulnerability findings and determine appropriate actions based on severity, exposure, exploitability, affected technology, and established enterprise requirements.
Create and distribute vulnerability advisories that clearly communicate affected technologies, risk, required actions, remediation guidance, and timelines.
Create, route, track, and follow up on remediation tickets with responsible technology teams.
Monitor outstanding vulnerability work and proactively engage stakeholders to drive remediation to completion.
Support both newly identified vulnerabilities and existing vulnerability backlog as needed.
Maintain accurate records and documentation throughout the vulnerability lifecycle.

Risk Acceptance

Facilitate established vulnerability risk acceptance processes for findings that cannot be remediated within required timelines.
Work with technical teams to understand remediation constraints, compensating controls, exposure, and residual risk.
Review existing risk acceptances approaching expiration and coordinate remediation, renewal, or escalation as appropriate.
Ensure risk acceptance documentation is technically accurate, clearly written, and completed in accordance with established processes and approval requirements.
Communicate effectively with engineers, managers, and technology leadership regarding vulnerability risk and remediation decisions.

Qualifications:

Significant hands-on experience in vulnerability management, vulnerability analysis, infrastructure security, or a closely related security engineering discipline.
Senior-level understanding of vulnerabilities, including CVEs, CVSS, vulnerability applicability, exploitability, remediation, mitigation, and false-positive validation.
Demonstrated ability to independently investigate and validate vulnerability findings rather than relying solely on vulnerability scanner results or severity ratings.
Strong technical understanding of enterprise infrastructure, including operating systems, networking, middleware, servers, common enterprise platforms, and related technologies.
Experience with enterprise vulnerability scanning and/or vulnerability management platforms such as Rapid7 InsightVM/Nexpose, Qualys VM, Nucleus, or comparable technologies.
Ability to research and interpret vendor security advisories, CVE information, scanner evidence, software versions, patches, configurations, and other technical data when assessing vulnerability findings.
Experience coordinating vulnerability remediation with infrastructure, platform, middleware, DevOps, or other technical engineering teams.
Ability to learn and consistently execute established operational processes and runbooks with minimal oversight.
Strong organizational skills and ability to independently manage multiple concurrent vulnerability investigations, remediation efforts, and stakeholder interactions.
Excellent written and verbal communication skills.
Strong interpersonal and relationship-management skills, with demonstrated ability to work effectively with both highly technical engineers and technology leadership.

Preferred Skills:

Direct experience with Rapid7 InsightVM/Nexpose, Nucleus, and/or Qualys Vulnerability Management.
Experience supporting enterprise-scale vulnerability management programs and large, heterogeneous technology environments.
Experience managing vulnerability advisories, remediation ticketing workflows, vulnerability exceptions, and/or formal risk acceptance processes.
Experience investigating vulnerabilities affecting middleware, infrastructure platforms, network technologies, operating systems, containers, or DevOps tooling.
Familiarity with vulnerability intelligence sources, exploitability analysis, CISA KEV, EPSS, vendor advisories, and other risk-prioritization inputs.
Experience working within defined vulnerability remediation SLAs and escalation processes.
Familiarity with workflow/ticketing platforms such as Jira or Ivanti.

Dice Id: napil006
Position Id: CJ-VulCA
Posted 15 days ago

Fitment

Dice Job Match Score™

🔢 Crunching numbers...

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Remote

•

15d ago

Easy Apply

Contract

Depends on Experience

Security - Vulnerability Management - CVE

Remote

•

15d ago

Easy Apply

Full-time

$110 - $125

Engineer III, Vulnerability Management

Remote or Philadelphia, Pennsylvania

•

Today

Full-time

Staff Vulnerability Management Engineer

Remote

•

Today

Full-time

USD 170,000.00 - 231,000.00 per year

Cyber Vulnerability Management Engineer CVE

Skills

Summary

Dice Job Match Score™

Similar Jobs

Cyber Vulnerability Management Engineer CVE

Job Details

Skills

Summary

Dice Job Match Score™

Similar Jobs