Senior Quality Engineer

Ethereum Technologies LLC; Boston (MA); On-site; USD 120,000 - 160,000; Full time

Job summary

Ethereum Technologies in Boston is seeking a cybersecurity professional to lead vulnerability management across enterprise environments, owning the full lifecycle from identification to closure.

You will collaborate with security engineering, IT operations, and development teams to prioritize remediation, validate fixes, and report risk posture. This role requires hands-on VM platform experience and strong communication skills.

Qualifications

• Bachelor's degree in IT/Cybersecurity/CS or related field (or equivalent experience).
• 4-8 years of hands-on experience in vulnerability management, security engineering, infrastructure security, or related cybersecurity discipline.
• Experience with enterprise vulnerability management platforms: Qualys VMDR, Tenable, Rapid7, or equivalent.
• Strong knowledge of CVE, CVSS, CPE, remediation and risk prioritization.
• Ability to interpret scanner results, investigate findings, and determine remediation actions.
• Experience in large/complex enterprise environments and cross-team remediation coordination.
• Excellent documentation and stakeholder communication skills.

Responsibilities

• Own the complete vulnerability lifecycle: identification, triage, remediation tracking, escalation, and closure.
• Drive remediation across multiple technical teams and stakeholders.
• Validate remediation through rescanning, testing, or evidence assessment.
• Manage high volumes of vulnerability data in a large enterprise environment.

Skills

Vulnerability management

Security engineering

Risk evaluation

CVE/CVSS knowledge

Scanner result analysis

Stakeholder communication

Documentation

Windows/Linux/Networking

Cloud environments

Cross-team coordination

Education

Bachelor's degree in IT / Cybersecurity / CS or related

Tools

Qualys VMDR

Tenable

Rapid7

Job description

US Citizen, Green Card, H-1B, OPT-EAD, CPT, Other

• Bachelor's degree in information technology, Cybersecurity, Computer Science, Business, or a related field (or equivalent experience).
• 4-8 years of hands-on experience in vulnerability management, security engineering, infrastructure security, or a closely related cybersecurity discipline.
• Demonstrated ownership of the complete vulnerability lifecycle: identification, triage, risk evaluation, ownership determination, stakeholder outreach, remediation tracking, escalation, validation, and closure.
• Strong hands-on experience with Qualys VMDR, Tenable, Rapid7, or an equivalent enterprise vulnerability management platform.
• Strong knowledge of CVE, CVSS, CPE, exploitability, severity, compensating controls, remediation, mitigation, false positives, risk acceptance, and vulnerability prioritization.
• Ability to independently interpret scanner results, investigate findings, assess practical risk, and determine appropriate remediation actions.
• Experience managing high volumes of vulnerability data in a large or complex enterprise environment.
• Experience identifying system or application owners and driving remediation across multiple technical teams.
• Experience validating remediation through rescanning, technical testing, manual review, or evidence assessment.
• Strong working knowledge of Windows, Linux, networking, servers, databases, middleware, virtualization, and cloud environments.
• Understanding remediation methods including patching, configuration changes, software upgrades, compensating controls, and service removal.
• Strong analytical, troubleshooting, documentation, stakeholder communication, prioritization, and organizational skills.
• Ability to work independently while managing multiple remediation efforts and collaborating across technical and business teams.

We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.