Security Engineer I - Threat & Vulnerability Management

AmTrust Financial Services, Inc.; Cleveland (OH); On-site; USD 60,000 - 90,000; Full time

Benefits offered by this job

Medical & Dental Plans

Life Insurance

Health Care Flexible Spending

Dependent Care

401k Savings Plans

Paid Time Off

Job summary

AmTrust Financial Services Inc. is seeking a Security Engineer I to join the Threat & Vulnerability Management team in Cleveland, OH. You will analyze vulnerability data, assess risk, track remediation, and help reduce enterprise risk through automation and dashboards.

You will gain hands-on experience with vulnerability management platforms, threat intelligence, and risk-based decision making while collaborating with security and technology teams to strengthen overall cybersecurity posture.

Qualifications

• Bachelor's degree or equivalent in a related field with 1–3 years in cybersecurity.
• Solid understanding of vulnerability management concepts and remediation processes.
• Familiarity with CVE, CVSS, KEV and risk-based prioritization.
• Experience with Windows, Linux, networks, and cloud platforms.

Responsibilities

• Support vulnerability management lifecycle from identification to verification.
• Review scan results to identify and prioritize security risks.
• Operate and maintain vulnerability assessment tools for asset coverage.
• Track remediation activities and ensure timelines are met.
• Research advisories and threat intelligence to understand risks.
• Assist assessments across on-premises, cloud, and hybrid environments.
• Develop dashboards and reports for vulnerability metrics.
• Escalate critical findings to senior team members when needed.

Skills

Vulnerability management concepts

Risk-based prioritization

Analytical & problem solving

Cross-team collaboration

Education

Bachelor's degree in Computer Science, Information Technology, Computer Engineering, Cybersecurity, or related field

Tools

Tenable

Qualys

Rapid7

Microsoft Defender Vulnerability Management

Job description

Overview

The Security Engineer I is a key member of the Threat & Vulnerability Management team, responsible for supporting the identification, assessment, prioritization, remediation, and ongoing management of vulnerabilities across the organization.

In this role, you will work closely with security and technology teams to analyze vulnerability data, assess risk, track remediation efforts, validate remediation activities, and help reduce enterprise technology risk. You will gain hands‑on experience with vulnerability management platforms, threat intelligence, automation, and risk‑based decision making while contributing to the overall effectiveness of the organization's cybersecurity program.

The ideal candidate possesses a solid foundation in cybersecurity principles, strong analytical and problem‑solving skills, and a desire to continue developing expertise in vulnerability management, exposure management, and enterprise security operations.

Responsibilities

Threat & Vulnerability Management

• Support the vulnerability management lifecycle, including vulnerability identification, validation, remediation tracking, verification, and reporting.
• Review and analyze vulnerability scan results to help identify and prioritize security risks.
• Assist with operating and maintaining vulnerability assessment tools to support accurate asset coverage and vulnerability visibility.
• Help track remediation activities and follow up with technology teams to ensure vulnerabilities are addressed within established timelines.
• Research vulnerabilities, security advisories, threat intelligence, and industry best practices to better understand emerging risks.
• Assist with vulnerability assessments across on‑premises, cloud, and hybrid environments.
• Support asset inventory and ownership validation efforts to enhance vulnerability tracking and visibility.
• Develop and maintain security integrations, automation, and workflows to enhance vulnerability management and risk visibility.
• Assist in developing and maintaining dashboards, reports, and metrics related to vulnerability management activities.
• Participate in vulnerability validation and verification activities to confirm successful remediation.
• Contribute to process improvement initiatives and automation efforts that enhance program efficiency and effectiveness.

Remediation & Governance

• Partner with infrastructure, application, cloud, and other technology teams to support remediation efforts.
• Assist with the documentation and tracking of vulnerability exceptions, compensating controls, and risk acceptance decisions.
• Support the development and maintenance of vulnerability management procedures, standards, and operational documentation.
• Help prepare reporting materials for operational reviews and security governance activities.
• Assist with audit and compliance activities by collecting and organizing supporting documentation and evidence.
• Monitor vulnerability disclosures, vendor security advisories, and emerging threats to help identify potential organizational impacts.
• Escalate critical findings and remediation challenges to senior team members when appropriate.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Computer Engineering, Cybersecurity, or a related field, or equivalent relevant professional experience.
• 1-3 years of experience in cybersecurity, vulnerability management, security operations, or a related technical role.
• Solid understanding of vulnerability management concepts, remediation processes, and risk‑based prioritization.
• Experience with or exposure to vulnerability management platforms such as Tenable, Qualys, Rapid7, or Microsoft Defender Vulnerability Management.
• Familiarity with common security frameworks and standards including CVE, CVSS, and CISA Known Exploited Vulnerabilities (KEV).
• Working knowledge of Windows, Linux, networking, cloud platforms, and enterprise technology environments.
• Strong analytical, organizational, and communication skills with the ability to collaborate across technical teams.
• Relevant certifications such as Security+, CySA+, or similar certifications are preferred.

What We Offer

AmTrust Financial Services offers a competitive compensation package and excellent career advancement opportunities.

• Medical & Dental Plans
• Life Insurance
• including eligible spouses & children
• Health Care Flexible Spending
• Dependent Care
• 401k Savings Plans
• Paid Time Off

AmTrust strives to create a diverse and inclusive culture where thoughts and ideas of all employees are appreciated and respected. This concept encompasses but is not limited to human differences with regard to race, ethnicity, gender, sexual orientation, culture, religion or disabilities.

AmTrust values excellence and recognizes that by embracing the diverse backgrounds, skills, and perspectives of its workforce, it will sustain a competitive advantage and remain an employer of choice. Diversity is a business imperative, enabling us to attract, retain and develop the best talent available. We see diversity as more than just policies and practices. It is an integral part of who we are as a company, how we operate and how we see our future.