Senior Vulnerability Engineer: Threat‑Driven Remediation

King-County,-W; Seattle (WA); Hybrid; USD 140,000 - 180,000; Full time

Job summary

King County's KCIT is seeking a Senior Vulnerability Engineer to lead enterprise vulnerability management across networks, cloud, and applications. You will identify, validate, prioritize, and remediate vulnerabilities, setting risk-informed remediation SLAs.

You will collaborate with infrastructure, security operations, DevOps, and governance teams, drive automation, and advance the program maturity through threat-informed decisions.

Qualifications

• Four or more years of experience in information security, vulnerability management, application security, security engineering, or related discipline.
• Strong understanding of modern security vulnerabilities, exploit techniques, and common attack vectors.
• Deep knowledge of vulnerability scanning tools (e.g., Rapid7, Qualys, Tenable), asset inventory systems, and security orchestration platforms.
• Familiarity with cloud security (AWS, Azure, GCP), container security, and modern DevOps workflows.
• Strong understanding of operating systems, networking fundamentals, and secure development practices.
• Awareness of regulatory, compliance, and industry security standards.
• Ability to translate technical findings into clear business risk for diverse stakeholders.
• Strong analytical skills for evaluating vulnerability risk, prioritization, and remediation strategies.
• Excellent communication and relationship-building skills across technical and non-technical teams.
• Skill in automating repetitive tasks and improving workflows.
• Ability to lead cross-team efforts, manage escalations, and drive timely decision-making.

Responsibilities

• Lead vulnerability operations: manage enterprise vulnerability scanning, validate accuracy, tune templates, and monitor health.
• Engage in risk-based prioritization: evaluate impacts, review patch releases, assess advisories, monitor feeds.
• Drive engineering & automation: integrate platforms, automate remediation, develop scripts, create APIs, automate reporting.
• Engage stakeholders: communicate findings in business terms and coordinate remediation timelines.
• Support threat and incident response: evaluate emergencies, identify affected assets, and coordinate patching.
• Guide program improvement: refine processes, tools, KPIs, and maturity roadmap; mentor team.

Skills

Vulnerability management

Information security

Security engineering

Cloud security

Networking fundamentals

Automation

Cross-team collaboration

Education

Bachelor’s degree in Computer Science, Information Security, or related field

Tools

Rapid7

Qualys

Tenable

Security orchestration platforms

Job description

King County's KCIT is seeking a Senior Vulnerability Engineer to lead enterprise vulnerability management across networks, cloud, and applications. You will identify, validate, prioritize, and remediate vulnerabilities, setting risk-informed remediation SLAs.

You will collaborate with infrastructure, security operations, DevOps, and governance teams, drive automation, and advance the program maturity through threat-informed decisions.