Senior Vulnerability Engineering Leader

King County, WA; Seattle (WA); Híbrido; USD 130.000 - 170.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work model

Flexible schedules

Training and career development

Descripción de la vacante

King County Information Technology (KCIT) seeks a Senior Vulnerability Engineer to lead the enterprise vulnerability management program across infrastructure, cloud, applications, and network devices. You will prioritize vulnerabilities, validate scanner accuracy, and drive remediation strategies with cross-functional teams.

You will advance threat-informed prioritization, implement vulnerability technologies, and contribute to program maturity through automation and process improvements.

Formación

• Four (4) or more years of experience in information security, vulnerability management, application security, security engineering, or related discipline.
• Strong understanding of modern security vulnerabilities, exploit techniques, and common attack vectors.

Responsabilidades

• Lead enterprise vulnerability scanning and validate scanner accuracy.
• Tune scan templates and credentials; maintain asset inventory coverage.
• Monitor scan health, remediation SLAs, and support external pen testing.
• Automate remediation workflows and develop security scripts.
• Communicate findings to stakeholders and guide remediation timelines.

Conocimientos

Vulnerability management

Vulnerability scanning tools

Cloud security

DevOps/automation

Threat-informed prioritization

Educación

Bachelor’s degree in Computer Science or related field

Herramientas

Rapid7

Qualys

Tenable

CMDB

PowerShell/Python

Descripción del empleo

King County Information Technology (KCIT) seeks a Senior Vulnerability Engineer to lead the enterprise vulnerability management program across infrastructure, cloud, applications, and network devices. You will prioritize vulnerabilities, validate scanner accuracy, and drive remediation strategies with cross-functional teams.

You will advance threat-informed prioritization, implement vulnerability technologies, and contribute to program maturity through automation and process improvements.