Senior Vulnerability Management Engineer

Compunnel, Inc.; Irving (TX); On-site; USD 100,000 - 130,000; Full time

Job summary

A leading technology security firm in Irving, Texas is seeking a Senior Vulnerability Management Engineer to manage and enhance their vulnerability management program. This role involves identifying, assessing, and coordinating remediation efforts for vulnerabilities. The ideal candidate will have over 5 years of experience in vulnerability management, a strong technical background, and the ability to communicate risks effectively.

Qualifications

• Minimum of 5 years of experience in vulnerability management across cloud, on-premises, and hybrid environments.
• Strong understanding of operating systems, networking protocols, and cloud platforms.
• Proficiency in vulnerability management and security tools.

Responsibilities

• Configure and maintain vulnerability management platforms.
• Identify, assess, and prioritize security vulnerabilities.
• Collaborate with teams to ensure remediation efforts.

Skills

Vulnerability management

Cloud platforms (AWS, Azure, GCP)

Operating systems (Windows, Linux, Unix)

Analytical and problem-solving skills

Written and verbal communication

Education

Bachelor's degree in computer science, Cybersecurity, or related field

Tools

Nucleus Security

Rapid7 InsightVM

Microsoft Defender

ServiceNow

BitSight

Job description

Senior Vulnerability Management Engineer

Texas, Irving

10/21/2025

Contract

Active

Job Description:

Job Summary:

The Senior Vulnerability Management Engineer is responsible for managing and enhancing the organization’s vulnerability management program to strengthen enterprise-wide security posture. This role involves identifying, assessing, prioritizing, and coordinating remediation efforts for vulnerabilities across cloud, on-premises, and hybrid environments. The ideal candidate will have extensive experience with vulnerability management tools, a strong technical background in security and compliance, and the ability to communicate risk effectively to both technical and executive audiences.

Key Responsibilities:

• Configure and maintain vulnerability management platforms such as Nucleus Security, Rapid7 InsightVM, Microsoft Defender, SentinelOne, ServiceNow, or BitSight.
• Identify, assess, and prioritize security vulnerabilities across diverse IT environments, including cloud, on-prem, and hybrid infrastructures.
• Collaborate with cross-functional teams to coordinate remediation efforts and ensure timely mitigation of security risks.
• Develop and optimize automated workflows for vulnerability tracking, reporting, and remediation.
• Prepare and present detailed reports to executive leadership, translating technical findings into business risks and recommendations.
• Participate in incident response activities during exploitation events and partner with threat intelligence teams to track emerging vulnerabilities and attack trends.
• Ensure compliance with regulatory standards and contribute to audit readiness efforts.
• Continuously evaluate and improve vulnerability management processes and controls.
• Support integration of vulnerability data with other security systems and tools for holistic visibility.

Required Skills:

• Minimum of 5 years of experience in vulnerability management across cloud, on-premises, and hybrid environments.
• Strong understanding of operating systems (Windows, Linux, Unix), networking protocols, and cloud platforms (AWS, Azure, GCP).
• Proficiency in using vulnerability management and security tools such as Nucleus Security, Rapid7 InsightVM, Microsoft Defender for Endpoint, ServiceNow, or BitSight.
• Experience with web application vulnerabilities (OWASP Top 10) and application security testing.
• Strong knowledge of compliance frameworks and risk management practices.
• Proven ability to design and implement process automation for vulnerability tracking and reporting.
• Exceptional analytical and problem-solving skills with keen attention to detail.
• Strong written and verbal communication skills with the ability to engage both technical and executive stakeholders.

Preferred Skills:

• Cloud security expertise and familiarity with emerging cloud threats.
• Experience managing security projects, including integrations and process improvements.
• Relevant certifications such as CompTIA Security+, CISSP, or CISM.
• Working knowledge of Regex for automation and data parsing.
• Basic SQL skills for querying and data analysis.
• Familiarity with the Purdue Network Model (PERA) for ICS network segmentation.

Education:

Bachelor’s degree in computer science, Cybersecurity, Information Systems, or a related field. Equivalent experience may be considered.