Full stack engineer with Vulnerability Management

Realign Llc; Charlotte (NC); On-site; USD 110,000 - 150,000; Full time

Job summary

Realign Llc in Charlotte, NC is seeking a Full stack engineer with Vulnerability Management to drive remediation across infrastructure, middleware, databases, platforms, and applications. You will coordinate security activities with IT and security teams, while delivering remediation plans and executive status updates.

The role requires strong Java/Spring Boot, Node.js, and React experience, plus expertise in vulnerability scanners and governance processes.

Qualifications

• Proficient full-stack developer with Java, Spring Boot, and Node.js experience.
• Experience in vulnerability management and enterprise remediation programs.
• Strong knowledge of cybersecurity governance, risk management, and compliance.
• Ability to coordinate remediation across multiple IT domains.

Responsibilities

• Lead end-to-end execution of enterprise vulnerability remediation initiatives.
• Coordinate remediation across Infrastructure, Middleware, Database, Platform, Application, and Security teams.
• Develop and maintain remediation plans, project schedules, milestones, dependencies, and deliverables.
• Drive closure of security vulnerabilities within enterprise-defined SLAs.

Skills

Full stack development

Java

Spring Boot

Maven

Node.js

NPM

React

CI/CD

JUNIT

Tosca

Litmus

Vulnerability Management

Governance, Risk & Compliance

Tools

Qualys

Tenable

Rapid7

ServiceNow Vulnerability Response

Tableau

MicroStrategy

Cognos

Power BI

TIBCO

Starburst

Job description

Full stack engineer with Vulnerability Management

Job Title: Full stack engineer with Vulnerability Management

Location : Charlotte, NC

Full Time

Job Description

Must Have Technical/Functional Skills

• Full stack developer with experience in following areas, Java, Spring Boot, Maven, Node.js, NPM, React, CI/CD, JUNIT, Tosca, Litmus
• Strong experience in Vulnerability Management and enterprise remediation programs.
• Expertise in Cybersecurity Governance, Risk Management, and Compliance.
• Experience coordinating vulnerability remediation across:
• Middleware Platforms, Server/Platform Infrastructure, Databases, Applications, Cloud and On-Prem Environments
• Knowledge of enterprise vulnerability management tools such as Qualys, Tenable, Rapid7, ServiceNow Vulnerability Response.
• Experience managing remediation activities for BI and Analytics platforms: Tableau, MicroStrategy, Cognos, Power BI, TIBCO, Starburst

Strong understanding of

• CVSS Scoring, Security Risk Ratings, Patch Management, Vulnerability Lifecycle Management, Risk Acceptance / Exception Processes

• Experience with security governance reporting, audit support, and compliance requirements.
• Strong stakeholder management and cross-functional coordination skills.
• ITIL Processes (Incident, Change, Problem Management)
• Enterprise Infrastructure & Platform Services
• Process Improvement and Automation · Banking/Financial Services domain experience preferred
• Lead end-to-end execution of enterprise vulnerability remediation initiatives.
• Coordinate remediation efforts across Infrastructure, Middleware, Database, Platform, Application, and Security teams.
• Develop and maintain remediation plans, project schedules, milestones, dependencies, and deliverables.
• Drive closure of security vulnerabilities within enterprise-defined SLAs.
• Facilitate governance meetings, remediation reviews, risk discussions, and executive status updates.
• Partner with Information Security, GIS, Infrastructure Services, Database Services, Middleware Services, Application Support teams, and external vendors.

Track and report

• Escalate overdue remediation activities, resource constraints, and critical risks.
• Ensure remediation activities meet audit, regulatory, and security compliance requirements.
• Maintain remediation evidence and documentation for audits and compliance reviews.
• Monitor vulnerability dashboards and ensure accuracy of governance metrics.
• Drive continuous improvement initiatives around remediation processes, governance, reporting, and automation.
• Act as the central point of contact between technology teams, security teams, leadership, and vendors.