Cyber Vulnerability Engineer - Lead Remediation

Comerica; Hoschton (GA); On-site; USD 150,000 - 210,000; Full time

Job summary

Comerica is seeking a Principal Cyber Vulnerability Engineer to lead vulnerability assessments and remediation efforts across applications and infrastructure. You will partner with AppSec and VM Ops teams, drive automation, and develop metrics and reporting while guiding cross-functional teams and vendors to reduce risk.

The role requires hands-on vulnerability management expertise, experience with Qualys and VMDR, and programming knowledge to automate processes.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, Information Systems, Cybersecurity, or Business Administration, or equivalent experience.
• 12+ years of relevant experience or equivalent education/work experience.
• 6+ years in Cyber/Security, preferably Vulnerability Management in financial services.
• 5+ years collaborating across Enterprise IT and Security to remediate vulnerabilities.
• 3+ years programming concepts (Python, .NET, Java, JavaScript) with automation.
• 3+ years in Qualys Policy management, PCI Compliance, VMDR modules.
• 2+ years in vulnerability assessments and cloud platform exposure management.

Responsibilities

• Perform vulnerability assessments and baseline scans; report on KRIs.
• Lead vulnerability management and remediation activities with owners.
• Establish mature processes around remediation and reporting.
• Lead projects like vulnerability prioritization to remediate critical issues.
• Evaluate vendors for vulnerability management products and support deployments.
• Develop metrics to track enterprise risks and remediation trends; report to management.
• Support monthly KRI reporting and remediation efforts across teams.
• Automate manual processes to improve delivery speed.
• Coach junior team members and application teams on remediation.

Skills

Vulnerability management

Automation

Cross-functional collaboration

Mentoring

Programming concepts

Security reporting/metrics

Cloud vulnerability management

Education

Bachelor’s degree

Equivalent experience

Tools

Qualys

VMDR

PowerBI

PowerShell

Endpoint protection technologies

Job description

Comerica is seeking a Principal Cyber Vulnerability Engineer to lead vulnerability assessments and remediation efforts across applications and infrastructure. You will partner with AppSec and VM Ops teams, drive automation, and develop metrics and reporting while guiding cross-functional teams and vendors to reduce risk.

The role requires hands-on vulnerability management expertise, experience with Qualys and VMDR, and programming knowledge to automate processes.