Full stack engineer with Vulnerability Management

KPG99 INC; Charlotte (NC); On-site; USD 120,000 - 170,000; Full time

Job summary

KPG99 INC. seeks a seasoned Full Stack Security Lead to drive enterprise vulnerability remediation programs.

The role requires coordinating across infrastructure, middleware, databases, platforms, and applications, while aligning with security governance and risk management practices. You will own remediation plans, track progress, report metrics, and ensure timely closure of vulnerabilities, leveraging tools like Qualys, Tenable, Rapid7, and ServiceNow Vulnerability Response.

Qualifications

• Experience leading enterprise vulnerability remediation programs.
• Strong understanding of CVSS scoring, risk ratings, and remediation lifecycles.
• Proven ability to coordinate across Infrastructure, Middleware, Database, Platform, Application, and Security teams.

Responsibilities

• Lead end-to-end execution of enterprise vulnerability remediation initiatives.
• Coordinate remediation efforts across multiple domains including Infrastructure, Middleware, Database, Platform, Application, and Security teams.
• Develop and maintain remediation plans, project schedules, milestones, dependencies, and deliverables.
• Drive closure of security vulnerabilities within enterprise-defined SLAs.
• Facilitate governance meetings, remediation reviews, risk discussions, and executive status updates.

Skills

Java

Spring Boot

Maven

Node.js

NPM

React

CI/CD

JUnit

Tosca

Litmus

Vulnerability management

Governance risk compliance

Stakeholder management

ServiceNow

Jira

Confluence

ITIL processes

Automation

Banking domain experience

Tools

Qualys

Tenable

Rapid7

ServiceNow Vulnerability Response

Job description

• Full stack developer with experience in following areas, Java, Spring Boot, Maven, Node.js, NPM, React, CI/CD, JUNIT, Tosca, Litmus
• Strong experience in Vulnerability Management and enterprise remediation programs.
• Expertise in Cybersecurity Governance, Risk Management, and Compliance.
• Experience coordinating vulnerability remediation across:
• Middleware Platforms, Server/Platform Infrastructure, Databases, Applications, Cloud and On-Prem Environments
• Knowledge of enterprise vulnerability management tools such as Qualys, Tenable, Rapid7, ServiceNow Vulnerability Response.
• Experience managing remediation activities for BI and Analytics platforms: Tableau, MicroStrategy, Cognos, Power BI, TIBCO, Starburst

· Strong understanding of:

• CVSS Scoring, Security Risk Ratings, Patch Management, Vulnerability Lifecycle Management, Risk Acceptance / Exception Processes
• Experience with security governance reporting, audit support, and compliance requirements.
• Strong stakeholder management and cross-functional coordination skills.
• ServiceNow, Jira, Confluence
• ITIL Processes (Incident, Change, Problem Management)
• Process Improvement and Automation · Banking/Financial Services domain experience preferred
• Lead end-to-end execution of enterprise vulnerability remediation initiatives.
• Coordinate remediation efforts across Infrastructure, Middleware, Database, Platform, Application, and Security teams.
• Develop and maintain remediation plans, project schedules, milestones, dependencies, and deliverables.
• Drive closure of security vulnerabilities within enterprise-defined SLAs.
• Facilitate governance meetings, remediation reviews, risk discussions, and executive status updates.
• Partner with Information Security, GIS, Infrastructure Services, Database Services, Middleware Services, Application Support teams, and external vendors.

Track and report:

• Escalate overdue remediation activities, resource constraints, and critical risks.
• Ensure remediation activites meet audit, regulatory, and security compliance requirements.
• Maintain remediation evidence and documentation for audits and compliance reviews.
• Monitor vulnerability dashboards and ensure accuracy of governance metrics.
• Drive continuous improvement initiatives around remediation processes, governance, reporting, and automation.
• Act as the central point of contact between technology teams, security teams, leadership, and vendors.