Hybrid Vulnerability Operations Engineer

Nelnet, Inc.; Centennial (CO); Hybrid; USD 75,000 - 125,000; Full time

Benefits offered by this job

Medical, dental, vision

401K and student loan repayment

HSA and FSA

Wellness program

Job summary

Nelnet, Inc. is seeking a Vulnerability Management Engineer to lead the design and continuous improvement of our vulnerability program.

You will collaborate with SOC, threat intelligence, and offensive security teams to identify risks and drive remediation across Azure, AWS, and GCP environments. The role requires 2+ years in vulnerability management or security operations, experience with major scanning tools and EDR, and strong scripting skills.

Qualifications

• 2+ years of experience in vulnerability management and/or security operations.
• Experience with vulnerability management solutions (Rapid7, Qualys, Tenable).
• Experience with patching tools like Microsoft MECM.
• Experience with EDR administration (Microsoft Defender, CrowdStrike, Carbon Black, Cortex XDR, Tanium).
• Strong understanding of cloud hosting platforms (Azure, AWS, GCP).
• Python programming language knowledge is required.

Responsibilities

• Lead design, development, and ongoing improvement of vulnerability management strategy.
• Stay current on threats and adapt the program accordingly.
• Oversee configuration and maintenance of vulnerability scanning tools.
• Analyze vulnerability data and recommend mitigation strategies.
• Develop and implement remediation plans with technology teams.
• Collaborate with cross‑functional teams to prioritize remediation and timely resolutions.
• Understand CIS benchmarks, DISA STIGs, NSA hardening guides, and other security frameworks.

Skills

Vulnerability management

Security operations

Python programming

Education

Bachelor’s degree in cyber security or information systems

Relevant work experience

Tools

Rapid7

Qualys

Tenable

Microsoft MECM

EDR administration

Azure

AWS

GCP

CrowdStrike Falcon

Job description

Nelnet, Inc. is seeking a Vulnerability Management Engineer to lead the design and continuous improvement of our vulnerability program.

You will collaborate with SOC, threat intelligence, and offensive security teams to identify risks and drive remediation across Azure, AWS, and GCP environments. The role requires 2+ years in vulnerability management or security operations, experience with major scanning tools and EDR, and strong scripting skills.