Security Assurance Engineer: Vulnerability & Assessments

Gruve; San Francisco (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

Gruve is seeking a Security Operations professional to manage vulnerability scanning, assessment reviews, remediation tracking, and incident handling. The role focuses on evidence validation, coordinating across Server/Network/DB/Cloud teams, and ensuring compliance reporting.

You will support 24x7 operations with rotation across APAC, EMEA, and NLAM regions. Ideal candidates have 3–6 years in cloud infra operations, hands-on Qualys VMDR experience, and strong ITSM and security assessment

Qualifications

• 3–6 years of experience in cloud infrastructure operations and production support.
• Hands-on experience with Qualys VMDR or equivalent vulnerability management tools.
• Strong understanding of CVEs, CVSS, vulnerability scanning and remediation validation.
• Experience with security assessments, technical evidence reviews and control gap identification.
• Knowledge of Windows/Linux, networking, databases, cloud and enterprise IT environments.
• Experience with ServiceNow or equivalent ITSM tools, reporting and SLA management.
• Global 24x7x365 support across multiple regions, with rotational shifts.

Responsibilities

• Vulnerability Management Operations (Scanning & Analysis) including troubleshooting and remediation validation.
• Coordinate technical security assessments and infrastructure control reviews.
• Track remediation activities across teams and monitor SLAs.
• Generate vulnerability, remediation aging, and compliance reports.
• Troubleshoot platform incidents and follow ITIL processes; drive process improvements.

Skills

Cloud infrastructure operations

Azure / AWS

Qualys VMDR

CVEs & CVSS

ITSM (ServiceNow)

Windows / Linux

Security incident handling

SLA management

Documentation & coordination

Education

Bachelor's degree in IT / related field

Tools

Qualys VMDR

ServiceNow

Job description

Gruve is seeking a Security Operations professional to manage vulnerability scanning, assessment reviews, remediation tracking, and incident handling. The role focuses on evidence validation, coordinating across Server/Network/DB/Cloud teams, and ensuring compliance reporting.

You will support 24x7 operations with rotation across APAC, EMEA, and NLAM regions. Ideal candidates have 3–6 years in cloud infra operations, hands-on Qualys VMDR experience, and strong ITSM and security assessment