FedRAMP Vulnerability & PenTest Engineer

Quzara LLC; United States; Remote; USD 90,000 - 120,000; Full time

Job summary

A cybersecurity firm is seeking a Vulnerability Management Engineer to scale and deliver Vulnerability Management Services. This role requires hands-on expertise with tools like Tenable.io and Nessus, focusing on supporting federal clients and ensuring audit readiness. Responsibilities include executing FedRAMP Continuous Monitoring activities and managing vulnerability data across various systems. The ideal candidate will have over 4 years of experience in Vulnerability Management or Penetration Testing, alongside strong knowledge of federal compliance requirements.

Qualifications

• 4+ years of experience in Vulnerability Management or Penetration Testing support.
• Expert-level proficiency with vulnerability scanning tools.
• Strong working knowledge of NIST SP 800-53 control requirements.

Responsibilities

• Install and maintain penetration testing toolsets for federal engagements.
• Execute monthly FedRAMP Continuous Monitoring activities.
• Analyze scan results and collaborate on timely remediation.

Skills

Enterprise vulnerability scanning

Penetration testing

Collaboration with SRE teams

Audit-ready tooling

Tools

Tenable.io

Nessus

Burp Suite

Metasploit

Kali Linux

Job description

A cybersecurity firm is seeking a Vulnerability Management Engineer to scale and deliver Vulnerability Management Services. This role requires hands-on expertise with tools like Tenable.io and Nessus, focusing on supporting federal clients and ensuring audit readiness. Responsibilities include executing FedRAMP Continuous Monitoring activities and managing vulnerability data across various systems. The ideal candidate will have over 4 years of experience in Vulnerability Management or Penetration Testing, alongside strong knowledge of federal compliance requirements.