- Bachelor's degree in information technology, Cybersecurity, Computer Science, Business, or a related field (or equivalent experience).
- 4-8 years of hands-on experience in vulnerability management, security engineering, infrastructure security, or a closely related cybersecurity discipline.
- Demonstrated ownership of the complete vulnerability lifecycle: identification, triage, risk evaluation, ownership determination, stakeholder outreach, remediation tracking, escalation, validation, and closure.
- Strong hands-on experience with Qualys VMDR, Tenable, Rapid7, or an equivalent enterprise vulnerability management platform.
- Strong knowledge of CVE, CVSS, CPE, exploitability, severity, compensating controls, remediation, mitigation, false positives, risk acceptance, and vulnerability prioritization.
- Ability to independently interpret scanner results, investigate findings, assess practical risk, and determine appropriate remediation actions.
- Experience managing high volumes of vulnerability data in a large or complex enterprise environment.
- Experience identifying system or application owners and driving remediation across multiple technical teams.
- Experience validating remediation through rescanning, technical testing, manual review, or evidence assessment.
- Strong working knowledge of Windows, Linux, networking, servers, databases, middleware, virtualization, and cloud environments.
- Understanding remediation methods including patching, configuration changes, software upgrades, compensating controls, and service removal.
- Strong analytical, troubleshooting, documentation, stakeholder communication, prioritization, and organizational skills.
- Ability to work independently while managing multiple remediation efforts and collaborating across technical and business teams.
We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.