Senior Vulnerability Management Architect- Remote, CE+ Focus

Cpl Group; Dublin; Remote; EUR 111,000 - 166,000; Full time

Job summary

Autodesk is seeking a Senior Vulnerability Management Engineer to own and operate the CE+ vulnerability program. This remote contractor role focuses on authenticated scanning, SLA-driven remediation, and evidence pipelines to demonstrate control effectiveness to assessors and leadership.

The role collaborates across Trust Compliance, Device Trust, Networking, and asset owners to scale VM across endpoints, data centers, and cloud workloads, extending beyond CE+ into broader enterprise scope.

Qualifications

• 7+ years of experience in vulnerability management, security engineering, or related roles.
• Hands-on experience with enterprise VM platforms (Defender VM, Qualys, Tenable, or Rapid7).
• Strong understanding of CVSS scoring, prioritization, and remediation lifecycle.
• Experience producing audit evidence for CE+, SOC 2, ISO 27001, PCI, or equivalent.
• Ability to partner with auditors, assessors, or regulators in a technical capacity.

Responsibilities

• Own end-to-end vulnerability management for CE+ in-scope assets — endpoints, servers, and supporting infrastructure.
• Configure and operate authenticated vulnerability scanning across Windows, macOS, Linux, and cloud workloads.
• Define and enforce SLA logic aligned to CE+ v3.3 — Critical/High vulnerabilities remediated within 14 days.
• Build and own the continuous evidence pipeline — scan coverage reporting, SLA dashboards, lifecycle audit trails, attestation packs.
• Own the exception register — document risk-accepted items with compensating controls and remediation roadmaps.
• Partner with CE+ assessors during certification cycles; serve as the technical voice defending control effectiveness.
• Coordinate remediation across Device Engineering, Device Trust, Networking, and business asset owners.
• Integrate findings with ITSM workflows for auto-ticketing, ownership, and SLA tracking.
• Contribute to broader enterprise vulnerability and patch management strategy as scope expands.
• Support adjacent compliance frameworks by leveraging VM evidence foundation.

Skills

Vulnerability management

Security engineering

Audit readiness

Cross-functional collaboration

Automation scripting

Tools

Microsoft Defender Vulnerability Management

Qualys

Tenable

Rapid7

Job description

Autodesk is seeking a Senior Vulnerability Management Engineer to own and operate the CE+ vulnerability program. This remote contractor role focuses on authenticated scanning, SLA-driven remediation, and evidence pipelines to demonstrate control effectiveness to assessors and leadership.

The role collaborates across Trust Compliance, Device Trust, Networking, and asset owners to scale VM across endpoints, data centers, and cloud workloads, extending beyond CE+ into broader enterprise scope.