Security Engineer – Vulnerability Management

Jobtailor; Deutschland; Remote; EUR 70.000 - 110.000; Vollzeit

Zusammenfassung

Jobtailor is seeking an experienced security professional to manage the organization’s vulnerability management program across applications, networks, endpoints, cloud environments, and enterprise systems.

You will collaborate with ISSOs and Controls Assessors to capture RMF artifacts, validate security controls, and ensure alignment with NIST 800-53, FISMA, and SOX. The role emphasizes patching, configuration hardening, and risk-based prioritization.

Qualifikationen

• 4–6 years of experience in vulnerability management or a related information security role.
• Advanced knowledge of Tenable Nessus, Qualys, Rapid7, or OpenVAS.
• Strong understanding of vulnerability scanning, assessment, and risk prioritization.
• Familiarity with CVSS, NIST 800-53, and OWASP Top 10.
• Understanding of OS-level vulnerabilities across Windows, Linux, and macOS.

Aufgaben

• Manage and mature the organization’s vulnerability management program.
• Identify, assess, and prioritize vulnerabilities across applications, networks, endpoints, cloud environments, and enterprise systems.
• Collaborate with ISSOs and Controls Assessors to capture RMF artifacts and validate security control effectiveness.
• Review, advise, and refine security Control Statements.
• Support compliance with NIST 800-53, FISMA, and SOX.
• Implement vulnerability management, patching, configuration hardening, and risk-reduction best practices.
• Assist with incident response involving exploited vulnerabilities.
• Establish repeatable workflows supporting ATO readiness for new systems.
• Communicate risk and recommend mitigation strategies.
• Contribute to continuous improvement of security processes and controls.

Kenntnisse

Vulnerability Management

Incident Response

Cloud Security

Risk Prioritization

Network Security

Ausbildung

Bachelor's Degree in Cybersecurity

Public Trust Security Clearance Eligibility

Tools

Tenable Nessus

Qualys

Rapid7

OpenVAS

AWS

Azure

GCP

Jobbeschreibung

• Manage and mature the organization’s vulnerability management program
• Identify, assess, and prioritize vulnerabilities across applications, networks, endpoints, cloud environments, and enterprise systems
• Collaborate with ISSOs and Controls Assessors to capture RMF artifacts and validate security control effectiveness
• Review, advise, and refine security Control Statements
• Support compliance with NIST 800-53, FISMA, and SOX
• Implement vulnerability management, patching, configuration hardening, and risk-reduction best practices
• Assist with incident response involving exploited vulnerabilities
• Establish repeatable workflows supporting ATO readiness for new systems
• Communicate risk and recommend mitigation strategies
• Contribute to continuous improvement of security processes and controls

Requirements

• 4–6 years of experience in vulnerability management or a related information security role
• Advanced knowledge of Tenable Nessus, Qualys, Rapid7, or OpenVAS
• Strong understanding of vulnerability scanning, assessment, and risk prioritization
• Familiarity with CVSS, NIST 800-53, and OWASP Top 10
• Understanding of OS-level vulnerabilities across Windows, Linux, and macOS
• Knowledge of TCP/IP, DNS, firewalls, routers, and switches
• Experience with AWS, Azure, GCP, and cloud-native policies
• Experience configuring and working with Identity Providers (IdP)
• Experience with patch management tools and processes
• Basic understanding of FISMA and SOX
• Familiarity with NIST CSF, ISO 27001, and CIS Controls
• Ability to assess vulnerabilities, identify risks, and support incident response
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience)
• U.S. Citizenship required
• Eligible to obtain a Public Trust security clearance

Core Competencies

Demonstrates expertise in vulnerability management, including risk assessment, incident response, and compliance with NIST 800-53 and FISMA. Proficient in utilizing tools such as Tenable Nessus and Qualys to identify and prioritize vulnerabilities across diverse environments.

Highest-signal resume keywords

• Vulnerability Management
• Tenable Nessus
• NIST 800-53 Compliance
• Incident Response
• Cloud Security (AWS, Azure, GCP)

ATS Optimization Keywords

Hard Skills

• Vulnerability Assessment
• Risk Prioritization
• Patch Management
• Configuration Hardening
• OS-Level Vulnerabilities (Windows, Linux, macOS)
• TCP/IP
• DNS
• Firewalls
• Identity Providers (IdP)
• CVSS

Soft Skills

• Collaboration
• Communication
• Continuous Improvement

Certifications & Qualifications

• Bachelor's Degree in Cybersecurity
• Public Trust Security Clearance Eligibility

Industry Keywords

• FISMA
• SOX
• NIST CSF
• ISO 27001
• CIS Controls
• Risk Management Framework (RMF)

Tools & Technologies

• Qualys
• Rapid7
• OpenVAS
• AWS
• Azure
• GCP