Senior Vulnerability & Exposure Engineer - Hybrid SP/Bogotá

StoneX Group Inc.; Bogotá; Hybrid; COP 340,210,000 - 463,922,000; Full time

Benefits offered by this job

Medical insurance

Transit benefits

Meal allowances

Job summary

StoneX Group Inc. is seeking a Senior Vulnerability Management Engineer to own and improve vulnerability and exposure management across infrastructure, apps, and cloud environments. You will optimize data quality, enable risk-based decision making, and drive remediation efforts.

The role requires 5–7+ years in tech with hands-on VM/EM experience, strong knowledge of major tooling, and a capability to lead PoCs and automation initiatives in a hybrid, multi-office setting.

Qualifications

• 5–7+ years of technology experience with at least 3–5 years in vulnerability management, exposure management, or information security engineering.
• Hands-on experience operating, configuring, optimizing, and troubleshooting vulnerability management tools (Tenable, Qualys, Rapid7, Defender VM, Armis).
• Solid understanding of Windows, Linux, MacOS, cloud platforms (AWS, Azure, GCP), networking, and identity systems.
• Familiar with CVSS/EPSS and applying them to risk-based decision making.

Responsibilities

• Operate and maintain vulnerability and exposure management platforms across enterprise environments.
• Serve as a senior technical SME, resolving complex issues and improving platform performance.
• Correlate vulnerability data with asset criticality and exploitability to support prioritization.
• Engineer dashboards, reporting, and data pipelines for visibility into posture and trends.
• Develop and enhance engineering processes for tooling, scanning, and reporting.
• Lead PoCs to evaluate and optimize tooling, integrating with asset management, CMDB, ticketing, and security platforms.
• Evaluate, build, and deploy AI/ML-assisted tooling for VM lifecycle management.

Skills

Vulnerability management

Exposure management

Security engineering

Cloud platforms

CVSS/EPSS

Python scripting

Education

Bachelor's degree in Information Security

Master's degree in related field

Tools

Tenable

Qualys

Rapid7

Microsoft Defender Vulnerability Management

Armis VIPR

ServiceNow

Jira

EASM/CTEM tools

Job description

StoneX Group Inc. is seeking a Senior Vulnerability Management Engineer to own and improve vulnerability and exposure management across infrastructure, apps, and cloud environments. You will optimize data quality, enable risk-based decision making, and drive remediation efforts.

The role requires 5–7+ years in tech with hands-on VM/EM experience, strong knowledge of major tooling, and a capability to lead PoCs and automation initiatives in a hybrid, multi-office setting.