Security Engineer

Conviso Inc.; Washington (District of Columbia); Remote; USD 110,000 - 140,000; Full time

Job summary

Conviso Inc. is recruiting a Security Engineer for a fully remote role in the United States. You will work in vulnerability management, patch validation, and compliance support across cloud environments, coordinating with IT teams and stakeholders.

The ideal candidate has 1-3 years in security engineering, hands-on with Nessus, Invicti, and SonarQube, and familiarity with Azure security controls. You will participate in Agile/Scrum with Jira, deliver reports, and assist audit activities.

Qualifications

• 1-3 years of experience in security engineering or related IT security roles.
• Hands-on experience with vulnerability scanning tools (Nessus, Invicti, SonarQube).
• Familiarity with cloud security frameworks (Azure preferred).
• Working knowledge of patch management processes, compliance frameworks, and auditing practices.
• Experience in Agile/Scrum environments and using JIRA.
• Strong communication skills and ability to collaborate effectively in remote teams.

Responsibilities

• Vulnerability Management: monitor, track, and support remediation activities for vulnerabilities.
• Patch & System Assurance: validate VMs after patch cycles and coordinate testing.
• Auditing & Compliance: support POA&M tracking and maintain security checklists.
• Baseline & Configuration Management: deliver monthly baseline reports and maintain Jira boards.

Skills

Security engineering

Agile/Scrum

Strong communication

Tools

Nessus

Invicti

SonarQube

JIRA

Azure

Job description

Conviso Inc is hiring Security Engineer. This is remote role and it comes with benefits, 401K & some accrued PTO. The Ideal Candite will have good understanding/foundation in vulnerability management, compliance support, and cloud infrastructure security.

Title: Security Engineer

Location: Remote, Washington, DC

Experience Level: 1-3 Years

Key Responsibilities

Vulnerability Management

• Monitor, track, and support remediation activities for vulnerabilities identified through tools such as Nessus, Defender for Cloud, Invicti, and SonarQube.
• Deliver weekly Splunk auditable events reports.
• Lead weekly security meetings, providing updates on ongoing vulnerability and remediation efforts.
• Ensure all vulnerability related certificates remain valid and current.
• Track and verify that all software licenses are up to date.

Patch & System Assurance

• After scheduled patching cycles, validate that all Virtual Machines (VMs) are operational.
• Communicate status updates to application teams and key stakeholders and coordinate testing to ensure systems function as expected.

Auditing & Compliance

• Support Plan of Action and Milestones (POA&M) tracking and drive closure of outstanding items.
• Maintain and update Security Engineering checklists to ensure continuous compliance.
• Fulfill A&A (Assessment & Authorization) data requests as needed.
• Respond to FNA Security inquiries regarding vulnerabilities during Change Request review cycles.

Baseline & Configuration Management

• Generate and deliver monthly baseline reports for environments, including:
  • Software end of life assessments
  • Ports and protocols validation
• Maintain accuracy of JIRA boards by aligning stories and sub tasks with active sprint work.
• Prepare materials and updates for sprint reviews on the first day of each sprint.

Qualifications

• 1-3 years of experience in security engineering or related IT security roles.
• Hands on experience with vulnerability scanning tools (e.g., Nessus, Invicti, SonarQube).
• Familiarity with cloud security frameworks (Azure preferred).
• Working knowledge of patch management processes, compliance frameworks, and auditing practices.
• Experience working in Agile/Scrum environments and using tools such as JIRA.
• Strong communication skills and ability to collaborate effectively in remote teams.