IT Vulnerability Engineer III (Must Reside in Texas)

Randolph-Brooks Federal Credit Union; United States; Hybrid; USD 120,000 - 160,000; Full time

Job summary

Randolph-Brooks Federal Credit Union is seeking an experienced Vulnerability Engineer III to join our IT Security team. The role supports hybrid work after training and requires Texas residence to perform all work from home in Texas.

The team focuses on scalable vulnerability management, automation, and risk reduction across on-prem and cloud environments. You will lead complex assessments, drive remediation across multiple engineering teams, and develop analytics to improve coverage and risk

Qualifications

• Bachelor's degree in Computer Science, MIS, Cybersecurity, IT, or related field, or equivalent experience.
• 3–5 years direct vulnerability management, vulnerability assessment, attack surface management, threat exposure management, or security operations experience.
• Experience with risk-based vulnerability management, continuous threat exposure management, external attack surface management, attack-path analysis, or breach and attack simulation.
• Experience building automated vulnerability validation, remediation orchestration, exception governance, risk scoring, and executive/engineering reporting.
• Hands-on experience with Snowflake, Databricks, Microsoft Fabric, Splunk, Power BI, or comparable analytics platforms.
• Experience with Infrastructure as Code, software supply chain risk, container registries, cloud security posture management, or application security findings.
• Deep hands-on experience with vulnerability discovery, validation, risk-based prioritization, remediation, exception handling, and enterprise reporting.
• Experience assessing and securing Windows, Linux, networks, cloud, containers, Kubernetes, databases, and common enterprise services.
• Advanced understanding of vulnerability concepts including CVSS, EPSS, KEV, exploit maturity, attack paths, asset criticality, reachability, compensating controls, and residual risk.
• Automation or software development experience using Python, PowerShell, Go, Java, SQL, or APIs.
• Experience integrating vulnerability data with asset inventory, CMDB, and ticketing.

Responsibilities

• Lead complex vulnerability assessments and exposure analysis across hybrid infrastructure, endpoints, networks, cloud platforms, containers, and external services.
• Validate and contextualize high-risk findings using exploit intelligence, attack-path analysis, asset criticality, business impact, and remediation strategies.
• Lead organizational response to critical vulnerabilities, including impact analysis, scoping, stakeholder coordination, remediation strategy, executive updates, and closure.
• Drive vulnerability triage, prioritization, exception analysis, remediation planning, escalation, retesting, and risk reporting across multiple teams.
• Design and maintain production-quality tooling, data pipelines, integrations, and automation for discovery, enrichment, validation, ticketing, orchestration, and reporting.
• Improve coverage and accuracy by resolving asset inventory, ownership, credentials, network reachability, cloud connectors, tagging, and scanner configuration issues.
• Translate exposure patterns into secure configuration standards, patching guardrails, remediation playbooks, SLAs, and preventive controls.
• Define metrics and analytics to measure exploitable exposure, risk concentration, aging, remediation effectiveness, and control performance.
• Collaborate with infrastructure, cloud, network, endpoint, platform, application, architecture, audit, and risk teams to drive durable remediation outcomes.
• Mentor engineers and provide leadership during high-consequence vulnerability events.

Skills

Vulnerability management

Threat exposure management

Security operations

Attack surface analysis

Automation

Education

Bachelor's degree in Computer Science or related field

Tools

Snowflake

Databricks

Microsoft Fabric

Splunk

Power BI

Python

PowerShell

Go

Java

SQL

APIs

Job description

Job Description and Requirements

Randolph-Brooks Federal Credit Union is currently searching for an experienced and talented Vulnerability Engineer III to join our amazing IT Security team!

The Vulnerability Engineer III will have the ability to work a hybrid schedule (remote/onsite) after a period of training (time frame may vary). Training will take place at the RBFCU Administrative Service Center: 1 Ikea-RBFCU Pkwy, Live Oak, Texas 78233.

All applicants must reside within the state of Texas and have the capability of performing all of the work from their home in Texas.

To successfully work from home, employees must have access to a minimum internet connection as noted by RBFCU.

Must have a reliable home internet provider and the ability to hard wire a connection directly to modem (Ethernet cable provided).

Must be able to provide a workspace at home that is safe, suitable for work, and within a distraction free environment

The Vulnerability Engineer III builds and scales vulnerability management and exposure reduction capabilities across the enterprise technology ecosystem. The role leads complex vulnerability assessments and response activities, combines technical validation with threat and asset context, drives remediation across multiple engineering teams, and develops automation, standards, and analytics that improve coverage, prioritization, and measurable risk reduction.

Essential Functions and Responsibilities:

• Lead complex vulnerability assessments and exposure analysis across hybrid infrastructure, endpoints, networks, cloud platforms, containers, data platforms, and externally accessible services.
• Validate and contextualize high-risk findings using exploit intelligence, attack-path analysis, asset criticality, business impact, compensating controls, and hands-on technical investigation.
• Lead organizational response to critical and emerging vulnerabilities, including impact analysis, scoping, stakeholder coordination, remediation strategy, executive updates, and closure assurance.
• Drive vulnerability triage, prioritization, exception analysis, remediation planning, escalation, retesting, and risk reporting across multiple technology teams.
• Design and maintain production-quality tooling, integrations, data pipelines, and automation for discovery, enrichment, normalization, deduplication, validation, ticketing, orchestration, and reporting.
• Improve assessment coverage and accuracy by resolving systemic issues involving asset inventory, ownership, credentials, network reachability, cloud connectors, tagging, and scanner configuration.
• Translate recurring exposure patterns into secure configuration standards, patching guardrails, remediation playbooks, service-level expectations, and preventive controls.
• Define meaningful metrics and analytics that measure exploitable exposure, risk concentration, aging, remediation effectiveness, coverage, exceptions, and control performance.
• Partner with infrastructure, cloud, network, endpoint, platform, application, architecture, incident response, audit, and risk teams to drive durable remediation outcomes.
• Mentor engineers, improve technical review quality, and provide leadership during urgent or high-consequence vulnerability events.

Requirements:

• Bachelor's degree in Computer Science, Management Information Systems, Cybersecurity, Information Technology, or a related field; or equivalent combination of education and experience.
• Minimum 3-5 years of direct vulnerability management, vulnerability assessment, attack surface management, threat exposure management, or security operations experience.
• Experience with risk-based vulnerability management, continuous threat exposure management, external attack surface management, attack-path analysis, or breach and attack simulation.
• Experience building automated vulnerability validation, remediation orchestration, exception governance, risk scoring, and executive or engineering reporting capabilities.
• Hands-on experience with Snowflake, Databricks, Microsoft Fabric, Splunk, Power BI, or comparable analytics and data platforms.
• Experience with Infrastructure as Code, software supply chain risk, container registries, cloud security posture management, or application security findings.
• Deep hands-on experience with vulnerability discovery, technical validation, risk-based prioritization, remediation, exception handling, and enterprise reporting.
• Experience assessing and securing Windows, Linux, network infrastructure, cloud platforms, containers, Kubernetes, databases, and common enterprise services.
• Advanced understanding of vulnerability and exposure concepts including CVSS, EPSS, KEV, exploit maturity, attack paths, asset criticality, reachability, compensating controls, and residual risk.
• Production-quality automation or software development experience using Python, PowerShell, Go, Java, SQL, APIs, or comparable technologies.
• Experience integrating vulnerability data with asset inventory, CMDB, ticketing,