Senior Vulnerability & Attack Surface Engineer

Cencora; Carrollton (TX); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Medical, dental, vision

Family support programs

Training & mentorship

Job summary

Cencora is seeking an Engineer III - Vulnerability Management to identify, analyze, prioritize, and drive remediation across enterprise environments including infrastructure, endpoints, cloud workloads, and applications.

This role supports CTEM activities, operates vulnerability and posture tools, and partners with technology, security, and business stakeholders to measurably reduce cyber risk. Excellent communication and leadership are essential.

Qualifications

• Bachelor's degree or equivalent in Cybersecurity, CS, IT, Engineering, or related field.
• 7–10 years in IT/cybersecurity roles with 4+ years in vulnerability/attack surface management.
• Active security certification (e.g., CISSP, CISM, Security+ or similar).
• Experience with vulnerability platforms (Qualys/Tenable/InsightVM, Defender Vulnerability Management).

Responsibilities

• Perform advanced vulnerability analysis across infrastructure, cloud, endpoint, network, and SaaS assets.
• Lead CTEM processes: scoping, discovery, prioritization, validation and risk reduction activities.
• Operate and optimize vulnerability, attack surface, and cloud posture capabilities.
• Develop actionable risk-based remediation priorities and dashboard reporting.
• Translate findings into remediation guidance for technical teams and leaders.

Skills

Vulnerability management

CTEM processes

Cross-functional coordination

Risk-based prioritization

Data analysis

Cloud security

Education

Bachelor's degree or equivalent in Cybersecurity/CS/IT

Tools

Qualys

Tenable

Rapid7 InsightVM

Microsoft Defender Vulnerability Management

Wiz

Armis

Power BI

Excel

SQL

Job description

Cencora is seeking an Engineer III - Vulnerability Management to identify, analyze, prioritize, and drive remediation across enterprise environments including infrastructure, endpoints, cloud workloads, and applications.

This role supports CTEM activities, operates vulnerability and posture tools, and partners with technology, security, and business stakeholders to measurably reduce cyber risk. Excellent communication and leadership are essential.