Security Engineer, Infrastructure Operations

11:11 Systems Inc.; Northern (KY); Hybrid; USD 120,000 - 160,000; Full time

Job summary

11:11 Systems Inc. is seeking a Security Engineer, Infrastructure Operations, to lead Vulnerability and Threat Management across enterprise infrastructure.

This hands-on role involves vulnerability scanning with Rapid7 InsightVM, Tenable, and Qualys in on-prem and cloud environments, and guiding remediation with automation. You will integrate threat intelligence and SIEM to enhance detection, align with NIST/CIS/PCI/ISO, and collaborate across infrastructure, network, and application teams in a

Qualifications

• 5+ years in cybersecurity with focus on vulnerability and threat management.
• Hands-on with vulnerability management platforms (Rapid7 InsightVM preferred).
• Strong understanding of CVSS, risk-based prioritization and exploit frameworks.
• Experience managing Windows and Linux environments.
• Familiarity with VMware and cloud platforms (AWS, Azure).
• Scripting/automation experience (PowerShell, Python, Bash, Ansible).
• Knowledge of network security concepts and SIEM tools.
• Experience with incident response and threat hunting is a plus.
• Certifications such as CISSP/CEH/GIAC are desirable.

Responsibilities

• Lead design and operation of enterprise Vulnerability & Threat Management programs.
• Operate and tune vulnerability scanning tools across on-prem and cloud environments.
• Analyze data, prioritize remediation by risk, and coordinate across teams.
• Integrate threat intelligence feeds and SIEM for enhanced detection and response.
• Automate remediation and reporting workflows using PowerShell/Ansible.
• Ensure patching aligned with SLAs and compliance requirements.
• Develop and enforce secure configuration baselines per CIS benchmarks.
• Generate compliance and risk posture dashboards as required.
• Lead incident response and threat hunting initiatives; drive continuous improvement.

Skills

Vulnerability management

Threat management

Automation

Scripting

Cloud platforms

Windows/Linux

SIEM

Incident response

Threat hunting

Policy development

Education

Bachelor's degree in Cybersecurity or related field

CISSP or equivalent certification

Tools

Rapid7 InsightVM

Tenable

Qualys

PowerShell

Ansible

WSUS/Automox

Job description

Security Engineer, Infrastructure Operations

Full Time Professional USA - Virtual, US

28 days ago Requisition ID: 1548

The Role:

We are seeking a Security Engineer with deep expertise in Vulnerability and Threat Management (VTM) to lead the identification, assessment, and remediation of security risks across 1111 Systems enterprise infrastructure. This role requires a hands-on engineer with strong experience in vulnerability scanning platforms, threat intelligence integration, and remediation automation within complex environments.

This is a full-time remote role in US reporting to the Director of Infrastructure Security.

Success in this role requires attention to detail, a collaborative mindset, and the ability to operate effectively in a fast-paced 24x7 operational environment.

Responsibilities:

• Lead and mature the design, implementation, and optimization of enterprise Vulnerability & Threat Management programs.
• Operate and tune vulnerability scanning tools (e.g., Rapid7 InsightVM, Tenable, Qualys) across on-prem and cloud environments.
• Analyze vulnerability data, prioritize remediation based on risk, exploitability, and business impact.
• Integrate threat intelligence feeds and SIEM platforms to enhance detection and response capabilities.
• Collaborate with infrastructure, network, and application teams to drive remediation efforts and reduce risk exposure.
• Align vulnerability management processes with compliance frameworks (NIST 800-53, CIS Benchmarks, PCI-DSS, ISO 27001), including audit preparation and evidence collection.
• Automate vulnerability remediation and reporting workflows using PowerShell, Ansible, or similar tools.
• Perform root cause analysis of recurring vulnerabilities and recommend long-term mitigation strategies.
• Support and validate patch management processes (WSUS, Automox), ensuring timely remediation aligned with SLAs and compliance requirements.
• Develop, define and enforce policies and procedures surrounding secure configuration baselines in accordance with CIS benchmarks and established best practices.
• Generate compliance and risk posture reports and dashboards as required.
• Lead incident response and threat hunting activities and define processes.
• Leverage AI in daily activities to enhance our ability to assess, identify and remediate emerging threats and existing vulnerabilities.

Qualifications:

• 5+ years of experience in cybersecurity, with a strong focus on vulnerability and threat management.
• Hands-on experience with vulnerability management platforms (Rapid7 InsightVM preferred).
• Strong understanding of CVSS scoring, exploit frameworks, and risk-based prioritization.
• Experience managing enterprise Windows and Linux environments.
• Strong understanding of virtualization platforms (VMware vSphere/ESXi/VCF) and cloud platforms (AWS, Azure).
• Scripting and automation experience (PowerShell, Python, Bash, or Ansible).
• Knowledge of network security concepts (firewalls, IDS/IPS, segmentation).
• Experience with SIEM tools used for correlating and reporting. (Rapid7 Insight DR, FortiSIEM)
• Experience managing endpoint protection tools (Symantec Endpoint Protection, Defender, Trend VisionOne).
• Practical experience in Penetration testing and/or red team/blue team activities (network, infrastructure, and/or web applications) and tools used in these activities.
• Knowledge of OWASP Top 10 and common web application security risks.
• Familiarity with container and Kubernetes security.
• Relevant certifications (CISSP, CEH, GIAC, or equivalent).
• Must be able to work in the US without a visa sponsorship
• Advanced analytical and problem-solving skills.
• Ability to translate technical risk into business impact.
• Effective cross-team collaboration and communication.
• Proactive approach to risk reduction, threat mitigation and continuous improvement.
• Ability to lead efforts and define policies and procedures within the enterprise.

To perform this job successfully, an individual must be able to perform each essential function satisfactorily. The requirements listed above are representative of the knowledge, skill, and/or ability required. Reasonable accommodation may be made to enable qualified individuals with disabilities to perform the essential functions.