Vulnerability Engineer

Kibernum; Santiago; Hybrid; CLP 16.740.000 - 27.900.000; Vollzeit

Benefits dieser Stelle

Permanent contract

Hybrid work model

Zusammenfassung

Kibernum is seeking a Vulnerability Engineer to join its Security team in the multi-technical services and energy solutions sector. You will assess, remediate, and manage vulnerabilities across a complex enterprise with a strong focus on automation and remediation strategies.

You will work with international teams, so fluent communication in English is essential. The role emphasizes ownership of the vulnerability lifecycle from detection to closure and ongoing improvement of security posture.

Qualifikationen

• Vulnerability management experience in enterprise environments.
• Tenable.io or Tenable.sc experience including administration.
• Cloud security experience with risk and controls awareness.
• End-to-end ownership of vulnerabilities from identification to closure.
• English level B2 or higher and strong communication.

Aufgaben

• Run vulnerability assessments and security scans across infrastructure, applications and systems.
• Optimize the Tenable.io platform for continuous scanning and monitoring.
• Analyze scan results, prioritize findings based on risk and recommend remediation.
• Track and update vulnerabilities in JIRA and ServiceNow.
• Propose compensating controls when remediation is not immediately possible.
• Coordinate with IT, DevOps, engineering teams and Application Owners to drive remediation.
• Maintain vulnerability metrics, dashboards and reports for technical audiences.
• Perform trend analysis and share insights on security posture.
• Stay current on emerging threats, vulnerabilities and best practices.
• Contribute to the development and improvement of vulnerability management policies and procedures.

Kenntnisse

Vulnerability management

Cloud security

End-to-end ownership

Automation scripting

English communication (B2+)

Tools

Tenable.io / Tenable.sc

Jobbeschreibung

We are looking for a Vulnerability Engineer to join the Security team of a leading company in the multi-technical services and energy solutions industry.

About the role

You will assess, remediate and manage security vulnerabilities across a complex enterprise environment, with a strong focus on automation and remediation strategies to meet vulnerability SLOs. We want someone who owns the vulnerability lifecycle from detection to closure, not only someone who finds issues. You will work with international teams, so fluent communication in English is part of the job.

What you will do

• Run vulnerability assessments and security scans across infrastructure, applications and systems.
• Optimize the Tenable.io platform for continuous scanning and monitoring.
• Analyze scan results, prioritize findings based on risk and recommend actionable remediation.
• Track and update vulnerabilities in JIRA and ServiceNow.
• Propose compensating controls when remediation is not immediately possible.
• Coordinate with IT, DevOps, engineering teams and Application Owners to drive and verify remediation.
• Maintain vulnerability metrics, dashboards and reports for technical audiences.
• Perform trend analysis and share insights on the organization’s security posture.
• Stay current on emerging threats, vulnerabilities and best practices.
• Contribute to the development and improvement of vulnerability management policies and procedures.

What we are looking for (must-have)

Vulnerability Management experience Management and follow-up of vulnerabilities from identification through closure. 2-3 years of hands-on experience in vulnerability management and security analysis.

Tenable experience Practical knowledge of the tool (Tenable.io or Tenable.sc), including platform administration and the related vulnerability management processes.

Cloud Security experience Experience in cloud environments is essential, along with a solid understanding of the risks and controls associated with cloud infrastructure.

End-to-end ownership You have managed vulnerabilities from start to finish:

• Identification and validation
• Remediation follow-up
• Coordination with Application Owners and technical teams
• Verification and closure

English level B2 or higher You will be communicating regularly with colleagues and stakeholders outside Chile, so you must be comfortable speaking and writing in English.

Also required

• Experience in enterprise environments with complex, multi-platform infrastructures.
• Hands-on experience with automation and scripting (Python, PowerShell, Bash or similar) applied to vulnerability management.
• Solid understanding of common vulnerabilities (OWASP Top 10, CVE/CVSS).
• Knowledge of operating systems (Windows, Linux, Unix) and network security principles.
• Familiarity with compliance frameworks (PCI-DSS, HIPAA, NIST, ISO 27001).

Highly valued

Wiz Experience

Experience or knowledge of the Wiz platform will be a significant advantage. Candidates without direct Wiz experience but with solid Cloud Security and Tenable experience will also be considered.

What we offer

• Permanent contract (indefinite term)
• Hybrid work model: 3 days on-site / 2 days remote