Senior Vulnerability Engineer — Cloud & Infra Security Lead

King County; Seattle (WA); Hybrid; USD 140,000 - 190,000; Full time

Job summary

King County Information Technology (KCIT) seeks a Senior Vulnerability Engineer to lead the enterprise vulnerability management program. You will identify, prioritize, and remediate vulnerabilities across infrastructure, cloud, apps, and network devices, coordinating with multiple teams to reduce cyber risk.

You will champion automation, threat-informed prioritization, and program maturity, while evaluating emerging threats and remediation strategies to strengthen security posture.

Qualifications

• Four or more years in information security or vulnerability management.
• Strong knowledge of vulnerability scanning tools and asset inventory systems.
• Ability to translate technical findings into business risk for stakeholders.
• Experience with automation and remediation workflow improvements.

Responsibilities

• Lead enterprise vulnerability management program execution.
• Validate scanner accuracy and investigate false positives.
• Develop remediation strategies and prioritize risk-based actions.
• Automate remediation workflows and integrate scanners with ticketing tools.
• Communicate findings to engineering, product, and leadership.

Skills

Vulnerability management

Threat analysis

Automation scripting

Cross-team leadership

clear business risk communication

Education

Bachelor’s degree in Computer Science or Information Security

Relevant security certifications (OSCP/OSWE/CISSP/GIAC/Security+)

Tools

Rapid7

Qualys

Tenable

Cloud security platforms (AWS/Azure/GCP)

Job description

King County Information Technology (KCIT) seeks a Senior Vulnerability Engineer to lead the enterprise vulnerability management program. You will identify, prioritize, and remediate vulnerabilities across infrastructure, cloud, apps, and network devices, coordinating with multiple teams to reduce cyber risk.

You will champion automation, threat-informed prioritization, and program maturity, while evaluating emerging threats and remediation strategies to strengthen security posture.