IT Vulnerability Engineer III (Must Reside in Texas)

Randolph-Brooks Federal Credit Union; San Antonio (TX); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

401(k) with matching incentives

Medical, vision and dental benefits

Tuition reimbursement

Life insurance

Paid time off

Parental leave

Job summary

Randolph-Brooks Federal Credit Union is seeking an experienced Vulnerability Engineer III to join our IT Security team. The role offers a hybrid work option after training at our Live Oak, Texas center, with all work performed from Texas during the transition.

You will lead vulnerability assessments, drive remediation strategy, and coordinate with multiple teams to reduce risk across hybrid environments. The ideal candidate has strong experience in vulnerability management, attack surface

Qualifications

• Bachelor's degree in Computer Science, MIS, Cybersecurity, IT, or related field.
• 3-5 years of direct vulnerability management, vulnerability assessment, attack surface management, threat exposure management, or security operations experience.
• Experience with risk-based vulnerability management and executive reporting.

Responsibilities

• Lead complex vulnerability assessments across hybrid infrastructure, endpoints, networks, cloud platforms, containers, data platforms, and externally accessible services.
• Context high-risk findings using exploit intelligence and attack-path analysis for remediation strategy.
• Drive vulnerability triage, prioritization, and risk reporting across multiple technology teams.
• Design and maintain tooling, data pipelines, and automation for discovery, enrichment, validation, and reporting.
• Mentor engineers and provide leadership during urgent vulnerability events.

Skills

Vulnerability management

Attack surface analysis

Risk-based prioritization

Python

PowerShell

Education

Bachelor's degree in Computer Science, MIS, Cybersecurity, IT or related field

Tools

Snowflake

Databricks

Microsoft Fabric

Splunk

Power BI

Job description

Randolph-Brooks Federal Credit Union is currently searching for an experienced and talented Vulnerability Engineer III to join our amazing IT Security team!

The Vulnerability Engineer III will have the ability to work a hybrid schedule (remote/onsite) after a period of training (time frame may vary). Training will take place at the RBFCU Administrative Service Center: 1 Ikea-RBFCU Pkwy, Live Oak, Texas 78233. All applicants must reside within the state of Texas and have the capability of performing all of the work from their home in Texas. To successfully work from home, employees must have access to a minimum internet connection as noted by RBFCU. Must have a reliable home internet provider and the ability to hard wire a connection directly to modem (Ethernet cable provided). Must be able to provide a workspace at home that is safe, suitable for work, and within a distraction free environment.

Essential Functions and Responsibilities

Lead complex vulnerability assessments and exposure analysis across hybrid infrastructure, endpoints, networks, cloud platforms, containers, data platforms, and externally accessible services. Validate and contextualize high-risk findings using exploit intelligence, attack-path analysis, asset criticality, business impact, compensating controls, and hands‑on technical investigation. Lead organizational response to critical and emerging vulnerabilities, including impact analysis, scoping, stakeholder coordination, remediation strategy, executive updates, and closure assurance. Drive vulnerability triage, prioritization, exception analysis, remediation planning, escalation, retesting, and risk reporting across multiple technology teams. Design and maintain production‑quality tooling, integrations, data pipelines, and automation for discovery, enrichment, normalization, deduplication, validation, ticketing, orchestration, and reporting. Improve assessment coverage and accuracy by resolving systemic issues involving asset inventory, ownership, credentials, network reachability, cloud connectors, tagging, and scanner configuration. Translate recurring exposure patterns into secure configuration standards, patching guardrails, remediation playbooks, service-level expectations, and preventive controls. Define meaningful metrics and analytics that measure exploitable exposure, risk concentration, aging, remediation effectiveness, coverage, exceptions, and control performance. Partner with infrastructure, cloud, network, endpoint, platform, application, architecture, incident response, audit, and risk teams to drive durable remediation outcomes. Mentor engineers, improve technical review quality, and provide leadership during urgent or high‑consequence vulnerability events.

Requirements

Bachelor's degree in Computer Science, Management Information Systems, Cybersecurity, Information Technology, or a related field; or equivalent combination of education and experience. Minimum 3-5 years of direct vulnerability management, vulnerability assessment, attack surface management, threat exposure management, or security operations experience. Experience with risk-based vulnerability management, continuous threat exposure management, external attack surface management, attack-path analysis, or breach and attack simulation. Experience building automated vulnerability validation, remediation orchestration, exception governance, risk scoring, and executive or engineering reporting capabilities. Hands‑on experience with Snowflake, Databricks, Microsoft Fabric, Splunk, Power BI, or comparable analytics and data platforms. Experience with Infrastructure as Code, software supply chain risk, container registries, cloud security posture management, or application security findings. Deep hands‑on experience with vulnerability discovery, technical validation, risk‑based prioritization, remediation, exception handling, and enterprise reporting. Experience assessing and securing Windows, Linux, network infrastructure, cloud platforms, containers, Kubernetes, databases, and common enterprise services. Advanced understanding of vulnerability and exposure concepts including CVSS, EPSS, KEV, exploit maturity, attack paths, asset criticality, reachability, compensating controls, and residual risk. Production‑quality automation or software development experience using Python, PowerShell, Go, Java, SQL, APIs, or comparable technologies. Experience integrating vulnerability data with asset inventory, CMDB, ticketing, SIEM, SOAR, data lakes, analytics platforms, or workflow systems. Advanced analytical skills and judgment to make defensible risk decisions in ambiguous situations involving incomplete data, operational constraints, and competing priorities.

Skills / Certification / Licensing

Serves as a subject‑matter expert across vulnerability platforms, infrastructure domains, cloud, automation, analytics, and risk prioritization. Defines the approach, priorities, and deliverables for complex assessments, critical vulnerability response, and capability improvements. Connects individual findings to systemic causes and develops scalable solutions that improve both prevention and remediation. Influences multiple technology teams, platforms, or business portfolios and improves program‑level risk outcomes. Builds alignment among engineers, service owners, architects, incident responders, risk partners, and leadership. Sets technical direction for initiatives, mentors others, leads urgent response, and raises the quality of engineering and risk decisions. Establishes enterprise direction, leads the highest‑consequence exposure decisions, creates organization‑wide capabilities, and is recognized as a trusted technical authority.

All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status.

Careers at RBFCU

Established in 1952, Randolph‑Brooks Federal Credit Union is a full‑service financial cooperative whose mission is to improve members’ economic well‑being and quality of life. With assets exceeding $19.6 billion, RBFCU serves more than 1.1 million members at branches throughout Texas and Oklahoma, and online at rbfcu.org and the RBFCU Mobile app. Recognized for financial stability, our credit union has consistently received the highest ratings of “Five Star” and “Superior” from respected organizations that evaluate financial institutions in the United States. We’re frequently recognized as one of the best workplaces on a local and national level.

Benefits

• 401(k) with matching incentives — up to 10 percent
• Competitive pay
• Medical, vision and dental benefits available to employees and their families from the first day of employment
• Tuition reimbursement plans
• Life insurance
• Pharmacy discount programs
• Flexible Spending (FSA), Health Savings (HSA) and Dependent Care account options
• Paid time off
• Parental leave
• Company-paid benefits include: Long-term disability Basic life insurance Wellness program Credit-monitoring service Employee assistance program Training and volunteer opportunities