Cloud Vulnerability Engineer & Remediation Lead

Workstreet; United States; Remote; USD 110,000 - 170,000; Full time

Benefits offered by this job

Remote-First Culture

Professional development

Competitive compensation

Job summary

Workstreet is seeking a consultative and hands-on Vulnerability Management Engineer to join our Delivery team. You will serve as the primary security advisor for an assigned portfolio of fast-growth startups, helping them identify, prioritize, and fix risks across cloud and on-prem environments.

In this role you will combine scanning infrastructure management with high-touch client advisory, surface critical vulnerabilities, and work directly with client IT and DevOps to deploy patches where the

Qualifications

• Experience configuring, deploying, and maintaining vulnerability platforms.
• Strong risk-based prioritization using CVSS and EPSS.
• Experience with cloud environments (AWS, GCP, Azure).
• Excellent written and verbal English skills.

Responsibilities

• Orchestrate vulnerability scanning infrastructure across client networks and clouds.
• Evaluate scan outputs and apply risk-based prioritization.
• Translate vulnerabilities into actionable remediation workflows with client engineers.
• Document and track risk exceptions and evidence for audits (SOC 2, ISO 27001, HIPAA, CMMC, and NIST).
• Act as primary security advisor for a portfolio of startups and deliver project milestones and status reports.

Skills

Vulnerability Scanning

Risk Prioritization

Cloud Security (AWS/Azure/GCP)

Security Advisory

Client Communication

Threat Analysis

Tools

Tenable/Nessus

Qualys

Rapid7 InsightVM

Vanta

Job description

Workstreet is seeking a consultative and hands-on Vulnerability Management Engineer to join our Delivery team. You will serve as the primary security advisor for an assigned portfolio of fast-growth startups, helping them identify, prioritize, and fix risks across cloud and on-prem environments.

In this role you will combine scanning infrastructure management with high-touch client advisory, surface critical vulnerabilities, and work directly with client IT and DevOps to deploy patches where the