Remote Security Engineer: Infra Vulnerability & Threat Ops

11 11 Systems; United States; On-site; USD 120,000 - 190,000; Full time

Job summary

1111 Systems is seeking a Security Engineer, Infrastructure Operations, to lead vulnerability and threat management across on-prem and cloud. You will drive risk-based remediation, integrate threat intel and SIEM, and collaborate across teams in a fast-paced 24x7 environment.

The role requires hands-on technical skills with vulnerability scanners, scripting, and automation, plus experience in compliance mappings (NIST, CIS, PCI). Remote US-based position reporting to Infra Security leadership.

Qualifications

• 5+ years of experience in cybersecurity, with a strong focus on vulnerability and threat management.
• Hands-on experience with vulnerability management platforms (Rapid7 InsightVM preferred).
• Strong understanding of CVSS scoring, exploit frameworks, and risk-based prioritization.
• Experience managing enterprise Windows and Linux environments.
• Strong understanding of virtualization platforms (VMware vSphere/ESXi/VCF) and cloud platforms (AWS, Azure).
• Scripting and automation experience (PowerShell, Python, Bash, or Ansible).
• Knowledge of network security concepts (firewalls, IDS/IPS, segmentation).
• Experience with SIEM tools used for correlating and reporting. (Rapid7 Insight DR, FortiSIEM)
• Experience managing endpoint protection tools (Symantec Endpoint Protection, Defender, Trend VisionOne).
• Practical experience in Penetration testing and/or red team/blue team activities (network, infrastructure, and/or web applications) and tools used in these activities.
• Knowledge of OWASP Top 10 and common web application security risks.
• Familiarity with container and Kubernetes security.
• Relevant certifications (CISSP, CEH, GIAC, or equivalent).
• Must be able to work in the US without a visa sponsorship
• Advanced analytical and problem-solving skills.
• Ability to translate technical risk into business impact.
• Effective cross-team collaboration and communication.
• Proactive approach to risk reduction, threat mitigation and continuous improvement.
• Ability to lead efforts and define policies and procedures within the enterprise.

Responsibilities

• Lead and mature the design, implementation, and optimization of enterprise Vulnerability & Threat Management programs.
• Operate and tune vulnerability scanning tools (e.g., Rapid7 InsightVM, Tenable, Qualys) across on-prem and cloud environments.
• Analyze vulnerability data, prioritize remediation based on risk, exploitability, and business impact.
• Integrate threat intelligence feeds and SIEM platforms to enhance detection and response capabilities.
• Collaborate with infrastructure, network, and application teams to drive remediation efforts and reduce risk exposure.
• Align vulnerability management processes with compliance frameworks (NIST 800-53, CIS Benchmarks, PCI-DSS, ISO 27001), including audit preparation and evidence collection.
• Automate vulnerability remediation and reporting workflows using PowerShell, Ansible, or similar tools.
• Perform root cause analysis of recurring vulnerabilities and recommend long-term mitigation strategies.
• Support and validate patch management processes (WSUS, Automox), ensuring timely remediation aligned with SLAs and compliance requirements.
• Develop, define and enforce policies and procedures surrounding secure configuration baselines in accordance with CIS benchmarks and established best practices.
• Generate compliance and risk posture reports and dashboards as required.
• Lead incident response and threat hunting activities and define processes.
• Leverage AI in daily activities to enhance our ability to assess, identify and remediate emerging threats and existing vulnerabilities.

Skills

VTM expertise

Vulnerability tools

Cloud (AWS/Azure)

Windows/Linux admin

Python scripting

PowerShell

Ansible

SIEM

Threat intel

Compliance frameworks

Tools

Rapid7 InsightVM

Tenable

Qualys

PowerShell

Python

Bash

Ansible

WSUS

Automox

VMware vSphere/ESXi/VCF

Job description

1111 Systems is seeking a Security Engineer, Infrastructure Operations, to lead vulnerability and threat management across on-prem and cloud. You will drive risk-based remediation, integrate threat intel and SIEM, and collaborate across teams in a fast-paced 24x7 environment.

The role requires hands-on technical skills with vulnerability scanners, scripting, and automation, plus experience in compliance mappings (NIST, CIS, PCI). Remote US-based position reporting to Infra Security leadership.