Lead Vulnerability Management Engineer

Jobtailor; Austin (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

Jobtailor in Austin, TX is seeking a senior leader to drive our Vulnerability Management program. You will oversee advanced scanning, risk assessment, and remediation prioritization, collaborating with IT, security, and audit teams to align with SOC-2, NIST, and PCI controls.

The role emphasizes implementing AI-driven workflows, translating regulatory requirements into precise scanning policies, and guiding cross-functional teams through remediation backlogs.

Qualifications

• 5+ years of Vulnerability Management experience, with a senior/lead capacity.
• Bachelor's degree in Computer Science or related security field.
• Solid understanding of SOC-2, NIST, PCI and applying them in enterprise environments.
• Excellent written and verbal communication and interpersonal skills.
• Strong understanding of vulnerability risk scoring (CVSS, EPSS) and risk assessment in business context.
• Hands-on experience with vulnerability scanning platforms (Qualys, Nessus, Rapid7 InsightVM).
• Experience using AI to develop and manage complex workflows and applications.
• Experience supporting GRC or external audits (PCI-DSS, SOC-2, ISO 27001).
• Ability to translate compliance policies into precise scanning configurations and remediation SLAs.
• On-call flexibility outside standard hours.
• Bonus: Python scripting.

Responsibilities

• Lead Vulnerability Management program and drive risk-based remediation.
• Design and implement AI-driven workflows for scanning and remediation processes.
• Translate regulatory requirements into concrete scanning policies and SLAs.
• Collaborate with IT, security, and audit teams to ensure compliance.
• Provide clear technical reporting and risk communication to stakeholders.

Skills

Vulnerability Management

Vulnerability Scanning

Security Frameworks

AI-Driven Solutions

GRC Compliance

Python Scripting

JIRA

Infra Pentesting Tools

Strong Communication

Interpersonal Skills

Education

Bachelor's Degree in Computer Science

Information Security Certifications

Tools

Qualys

Nessus

Rapid7 InsightVM

JIRA

Opencode

Windsurf

Job description

Requirements

• 5+ years of Vulnerability Management experience, with a proven track record in a senior or lead technical capacity
• Bachelor's degree in Computer Science, Information Security, or security certifications in a related field
• Solid understanding of modern security frameworks (e.g., SOC-2, NIST, PCI) and their application in enterprise environments
• Strong communication (written and verbal) and interpersonal skills
• Strong understanding of vulnerability risk scoring (e.g., CVSS, EPSS) and applying risk assessment methodologies in a business context
• Hands‑on experience with vulnerability scanning platforms (e.g., Qualys, Nessus, Rapid7 InsightVM)
• Strong analytical skills to identify patterns in data and distinguish theoretical risk from actual exploitability
• Demonstrated experience using AI to develop and manage complex workflows and applications
• Proven experience supporting GRC or external audit cycles (e.g., PCI-DSS, SOC-2, ISO 27001)
• Ability to translate high‑level compliance policies and regulatory requirements into precise technical vulnerability scanning configurations and remediation SLAs
• Flexibility to be on‑call outside standard working hours as needed
• Bonus: experience with scripting languages such as Python
• Bonus: experience with AI-development tooling such as Opencode or Windsurf
• Bonus: proficiency with ticketing tools such as JIRA
• Bonus: hands‑on experience with infrastructure pentesting tools

Core Competencies

Demonstrates expertise in Vulnerability Management, including advanced vulnerability scanning, risk assessment methodologies, and compliance with security frameworks. Capable of leading technical teams, designing AI‑driven solutions, and translating regulatory requirements into actionable scanning policies.

Highest-signal resume keywords

• Vulnerability Management Experience
• Vulnerability Scanning Platforms
• Security Frameworks (SOC-2, NIST, PCI)
• AI-Driven Solutions Development
• GRC Compliance Support

ATS Optimization Keywords

Hard Skills

• Vulnerability Risk Scoring (CVSS, EPSS)
• Advanced Vulnerability Scanning
• Risk Assessment Methodologies
• Technical Reporting
• Infrastructure Pentesting Tools

Soft Skills

• Strong Communication Skills
• Interpersonal Skills
• Analytical Skills

Certifications & Qualifications

• Bachelor's Degree in Computer Science
• Information Security Certifications

Industry Keywords

• Vulnerability Management Program
• Compliance Context
• Regulatory Requirements
• Remediation Backlog
• Security Standards and Procedures

Tools & Technologies

• Qualys
• Nessus
• Rapid7 InsightVM
• JIRA
• AI-Development Tooling (Opencode, Windsurf)