Vulnerability Engineer (Cloud Security | Tenable)

KIBERNUM S.A.; Santiago; Hybrid; CLP 9,000,000 - 13,000,000; Full time

Benefits offered by this job

Permanent contract

Hybrid work model

Flexible working hours

Health insurance

Annual salary adjustment based on IPC

Professional development opportunities

Job summary

KIBERNUM S.A. is seeking a Vulnerability Engineer to join the Security team. You will own the vulnerability lifecycle from detection to closure with a strong focus on automation and remediation strategies in a multi-technical services and energy solutions environment.

You will work with international teams, running scans, optimizing Tenable.io, and coordinating with IT, DevOps, and owners to verify remediation. English communication is essential for this role.

Qualifications

• 2–3 years hands-on vulnerability management experience
• Practical knowledge of Tenable.io or Tenable.sc including admin
• Experience in cloud environments and associated risks/controls
• End-to-end ownership from identification to closure
• English level B2 or higher for cross-border communication
• Automation and scripting applied to vulnerability management
• Knowledge of OWASP Top 10, CVE/CVSS
• Familiarity with Windows/Linux/Unix systems and network security
• Awareness of PCI-DSS/HIPAA/NIST/ISO 27001 compliance

Responsibilities

• Run vulnerability assessments and security scans across infrastructure, apps and systems
• Optimize the Tenable.io platform for continuous scanning and monitoring
• Analyze results and prioritize findings based on risk with remediation guidance
• Track vulnerabilities in JIRA and ServiceNow
• Propose compensating controls when remediation is not immediately possible
• Coordinate with IT, DevOps, engineering and application teams to verify remediation
• Maintain vulnerability metrics, dashboards and reports for technical audiences
• Perform trend analysis and share insights on security posture
• Stay current on threats, vulnerabilities and best practices
• Contribute to vulnerability management policies and procedures

Skills

Vulnerability management

Tenable

Cloud security

Automation scripting

English communication

OS & network security

Compliance frameworks

Tools

Tenable.io

Tenable.sc

Python

PowerShell

Bash

Job description

We are looking for a Vulnerability Engineer to join the Security team of a leading company in the multi-technical services and energy solutions industry.

About the role

You will assess, remediate and manage security vulnerabilities across a complex enterprise environment, with a strong focus on automation and remediation strategies to meet vulnerability SLOs. We want someone who owns the vulnerability lifecycle from detection to closure, not only someone who finds issues. You will work with international teams, so fluent communication in English is part of the job.

What you will do

• Run vulnerability assessments and security scans across infrastructure, applications and systems.
• Optimize the Tenable.io platform for continuous scanning and monitoring.
• Analyze scan results, prioritize findings based on risk and recommend actionable remediation.
• Track and update vulnerabilities in JIRA and ServiceNow.
• Propose compensating controls when remediation is not immediately possible.
• Coordinate with IT, DevOps, engineering teams and Application Owners to drive and verify remediation.
• Maintain vulnerability metrics, dashboards and reports for technical audiences.
• Perform trend analysis and share insights on the organization’s security posture.
• Stay current on emerging threats, vulnerabilities and best practices.
• Contribute to the development and improvement of vulnerability management policies and procedures.

What we are looking for (must-have)

Vulnerability Management experience Management and follow-up of vulnerabilities from identification through closure. 2–3 years of hands‑on experience in vulnerability management and security analysis.

Tenable experience Practical knowledge of the tool (Tenable.io or Tenable.sc), including platform administration and the related vulnerability management processes.

Cloud Security experience Experience in cloud environments is essential, along with a solid understanding of the risks and controls associated with cloud infrastructure.

End-to-end ownership

• Identification and validation
• Remediation follow‑up
• Coordination with Application Owners and technical teams
• Verification and closure

English level B2 or higher You will be communicating regularly with colleagues and stakeholders outside Chile, so you must be comfortable speaking and writing in English.

Also required

• Experience in enterprise environments with complex, multi‑platform infrastructures.
• Hands‑on experience with automation and scripting (Python, PowerShell, Bash or similar) applied to vulnerability management.
• Solid understanding of common vulnerabilities (OWASP Top 10, CVE/CVSS).
• Knowledge of operating systems (Windows, Linux, Unix) and network security principles.
• Familiarity with compliance frameworks (PCI-DSS, HIPAA, NIST, ISO 27001).

Highly valued

Wiz Experience or knowledge of the Wiz platform will be a significant advantage. Candidates without direct Wiz experience but with solid Cloud Security and Tenable experience will also be considered.

Important considerations

• We are not looking for profiles focused solely on implementing security tools.
• This role is not a fit for candidates whose work consisted only of detecting vulnerabilities and handing them off to other teams without further follow‑up.

Soft skills

Clear communication with technical and non-technical stakeholders, collaboration with cross‑functional teams, problem‑solving, adaptability, critical thinking, time management and empathy.

What we offer

• Permanent contract (indefinite term)
• Hybrid work model: 3 days on-site / 2 days remote
• Flexible working hours
• Health insurance
• Annual salary adjustment based on IPC
• Professional development opportunities