Vulnerability Management Specialist CLOUD Manager

Auxis; Bogotá ciudad; Presencial; COP 12.000.000 - 18.000.000; Jornada completa

Descripción de la vacante

Auxis is seeking an experienced Vulnerability Management Engineering and Operations Senior Associate in Bogotá to lead end-to-end vulnerability management across on-premises and cloud environments. You will perform vulnerability assessments with Wiz/Qualys, produce actionable reports, and drive remediation with cross-functional teams.

The role emphasizes AI-powered automation, dashboards for leadership, and alignment with PCI-DSS, ISO 27001, and SOC 2 controls.

Formación

• 4–6 years of vulnerability management experience.
• Hands-on Wiz and Qualys experience, including CSPM modules.
• Experience with cloud security platforms and CSPM.
• Windows and Linux OS knowledge; networking fundamentals.
• Ability to design and implement AI-powered automation to streamline workflows.

Responsabilidades

• Operate the vulnerability management program across on-prem, cloud, and hybrid environments.
• Conduct vulnerability assessments, secure config reviews, and policy compliance scans with Wiz and Qualys.
• Investigate, prioritize, and remediate vulnerabilities across CSPM platforms.
• Produce actionable vulnerability reports for patch management teams to enable remediation.
• Create dashboards and reports for leadership, compliance, and audit purposes.
• Monitor threats and industry best practices to improve the process.
• Support PCI-DSS, ISO 27001, and SOC 2 compliance via reporting.
• Design AI-powered automation to reduce manual tasks and boost efficiency.

Conocimientos

Vulnerability management

Cloud CSPM

AI automation

Windows and Linux

CVSS prioritization

Dashboard reporting

English (B2+)

Stakeholder management

Educación

Certifications: Qualys Certified Specialist, Wiz Certified Professional, CISSP, CEH, CompTIA Security+

Herramientas

Wiz

Qualys

Copilot/Agentic AI

Descripción del empleo

Job Summary

We are looking for an experienced Vulnerability Management Engineering and Operations Senior Associate with strong hands‑on expertise in Wiz (including Wiz UVM) and, additionally, Qualys, secure configuration assessments, policy compliance scanning, CrowdStrike exposure management, and enterprise vulnerability management. The ideal candidate will also have experience working with these and other cloud security platforms to identify, prioritize, and help remediate vulnerabilities across hybrid environments, using technology platforms and innovative automation solutions using AI.

Responsibilities

• Operate the vulnerability management program, ensuring vulnerabilities are identified, assessed, and remediated across on‑premises, cloud, and hybrid infrastructures.


• Execute vulnerability assessments, secure configuration reviews, and policy compliance scans using Wiz, Qualys, and related security tools.


• Investigate, prioritize, and remediate vulnerabilities identified by Qualys, Wiz, and other Cloud Security Posture Management (CSPM) platforms.


• Hands‑on experience in generating actionable vulnerability reports for patch management teams, enabling timely and efficient remediation of security vulnerabilities.


• Create and maintain dashboards, reports, and security metrics for leadership, compliance, and audit purposes.


• Monitor emerging security threats, newly disclosed vulnerabilities, and industry best practices to continuously improve the vulnerability management process.


• Assist with compliance initiatives, including PCI‑DSS, ISO 27001, and SOC 2, by providing vulnerability assessment results and configuration compliance reporting.


• Design and implement AI‑powered automation solutions to streamline workflows, reduce manual tasks, improve operational efficiency, and automate repetitive business processes.

Skills and Experience

• English B2+ or Higher


• 4–6 years of experience in vulnerability management, cybersecurity, or a related information security role.


• Practical experience with Wiz, Qualys, including vulnerability scanning, secure configuration assessment, and policy compliance modules.


• Working knowledge of Wiz UVM and other comparable CSPM solutions for cloud vulnerability and misconfiguration management.


• Strong understanding of Windows and Linux operating systems, networking fundamentals, and cloud platforms including AWS, Azure, and GCP.


• Solid knowledge of CVSS scoring, risk‑based vulnerability prioritization, and remediation methodologies.


• Familiarity with AI tools, workflow automation platforms, and integrating AI into existing systems is preferred.

Preferred Qualifications

• Experience developing automation using Copilot or other Agentic AI frameworks


• Industry certifications such as Qualys Certified Specialist, Wiz Certified Professional, CISSP, CEH, or CompTIA Security+ are highly desirable.


• Partner with relevant teams to prioritize remediation activities based on business risk and compliance requirements.


• Experience in patch management and creating patch jobs, and coordinating with relevant teams to execute patch management processes.

Soft Skills

• Good communication, collaboration, and stakeholder management abilities.


• Strong analytical and problem‑solving skills with the ability to manage multiple priorities in a fast‑paced environment.


• Experience working within multinational environments with complex IT asset landscapes.


• Attention to detail and accuracy.


• Strong problem‑solving and analytical abilities.