Senior Vulnerability Management Engineer

Appathon; Plano (TX); On-site; USD 62,000 - 69,000; Full time

Benefits offered by this job

null

Job summary

Appathon is seeking a Senior Vulnerability Management Engineer in Plano, TX to lead and mature an enterprise‑wide vulnerability program. You will own the full lifecycle from discovery to remediation, coordinating with infrastructure, cloud, security, and business teams to drive timely fixes and measurable risk reductions.

You will analyze findings, manage SLAs, validate fixes, and optimize tooling and dashboards.

Qualifications

• Bachelor's degree in IT, Cybersecurity, CS, Business, or related field, or equivalent experience.
• 4–8 years hands-on Vulnerability Management or related cybersecurity discipline.
• Strong experience with Qualys VMDR, Tenable, Rapid7 or equivalent platforms.
• Proven experience managing full vulnerability lifecycle in enterprise environments.
• Knowledge of CVE, CVSS, CPE, exploitability, risk acceptance, remediation methodologies.
• Technical knowledge of Windows, Linux, networking, servers, databases, middleware, virtualization, and cloud infrastructure.

Responsibilities

• Manage end-to-end vulnerability identification, analysis, prioritization, remediation tracking, validation, and closure.
• Analyze scanner findings using CVE, CVSS, CPE, CISA KEV, EPSS, vendor advisories, threat intelligence, and exploitability data.
• Assess vulnerability severity, asset criticality, business impact, and organizational risk.
• Investigate false positives, duplicate findings, compensating controls, risk acceptance, and remediation exceptions.
• Coordinate with infrastructure, application, cloud, security, and business teams to drive timely remediation.
• Track remediation SLAs, elevate overdue and critical vulnerabilities, and support emergency remediation efforts.
• Validate fixes through rescanning, technical testing, manual reviews, and supporting evidence.
• Administer and optimize vulnerability management platforms, asset inventories, scan configurations, dashboards, and reports.
• Monitor vulnerability trends, aging, recurrence, remediation performance, and SLA compliance.
• Improve vulnerability management workflows through automation, documentation, reporting, and continuous program enhancement.

Skills

Vulnerability Management

Security Engineering

Infrastructure Security

Risk-based Remediation

Windows OS

Linux OS

Cloud Security

Education

Bachelor's degree

Tools

Qualys VMDR

Tenable

Rapid7

Splunk

Microsoft Sentinel

ServiceNow

Jira

Power BI

Python

PowerShell

REST APIs

CMDB

ITSM

Job description

Senior Vulnerability Management Engineer

Location

Job Type

45.00 - 50.00

Deadline

Not specified

Education

Bachelor

Experience

About the Role

Hiring: Senior Vulnerability Management Engineer

Location: Plano, TXDivision: CybersecurityExperience: 4–8 YearsSpecialization: Enterprise Vulnerability Management, Security Engineering & Risk-Based Remediation

We are seeking an experienced Senior Vulnerability Management Engineer to support and enhance an enterprise-wide vulnerability management program. This is a hands‑on technical role focused on managing the complete vulnerability lifecycle, from identification and risk assessment to remediation, validation, and closure.

Key Responsibilities

• Manage end-to-end vulnerability identification, analysis, prioritization, remediation tracking, validation, and closure.
• Analyze scanner findings using CVE, CVSS, CPE, CISA KEV, EPSS, vendor advisories, threat intelligence, and exploitability data.
• Assess vulnerability severity, asset criticality, business impact, and organizational risk.
• Investigate false positives, duplicate findings, compensating controls, risk acceptance, and remediation exceptions.
• Coordinate with infrastructure, application, cloud, security, and business teams to drive timely remediation.
• Track remediation SLAs, elevate overdue and critical vulnerabilities, and support emergency remediation efforts.
• Validate fixes through rescanning, technical testing, manual reviews, and supporting evidence.
• Administer and optimize vulnerability management platforms, asset inventories, scan configurations, dashboards, and reports.
• Monitor vulnerability trends, aging, recurrence, remediation performance, and SLA compliance.
• Improve vulnerability management workflows through automation, documentation, reporting, and continuous program enhancement.

Required Qualifications

• Bachelor's degree in IT, Cybersecurity, Computer Science, Business, or a related field, or equivalent professional experience.
• 4–8 years of hands‑on experience in Vulnerability Management, Security Engineering, Infrastructure Security, or a related cybersecurity discipline.
• Strong experience with Qualys VMDR, Tenable, Rapid7, or equivalent enterprise vulnerability management platforms.
• Proven experience managing the complete vulnerability lifecycle in complex enterprise environments.
• Strong understanding of CVE, CVSS, CPE, exploitability, vulnerability severity, risk acceptance, compensating controls, and remediation methodologies.
• Technical knowledge of Windows, Linux, networking, servers, databases, middleware, virtualization, and cloud infrastructure.
• Experience coordinating remediation, managing SLAs and escalations, validating fixes, and communicating with stakeholders.
• Strong analytical, troubleshooting, documentation, prioritization, and organizational skills.

Preferred Qualifications

• Advanced experience with Qualys VMDR, including authenticated scanning, agent-based assessments, asset tagging, dashboards, and reporting.
• Experience with Attack Surface Management (ASM) or External Exposure Management.
• Knowledge of AWS, Microsoft Azure, or Google Cloud Platform (GCP).
• Experience integrating vulnerability management tools with SIEM, SOAR, CMDB, ITSM, ticketing, and asset management solutions.
• Familiarity with ServiceNow, Jira, Splunk, Microsoft Sentinel, and Power BI.
• Scripting and automation experience with Python, PowerShell, or REST APIs.
• Knowledge of CISA KEV, EPSS, exploit intelligence, remediation SLAs, governance, and compliance frameworks.
• Relevant certifications such as CompTIA Security+, CISSP, GIAC, or Qualys certifications.

Tools & Technologies: Qualys VMDR, Tenable, Rapid7, CVE, CVSS, CPE, CISA KEV, EPSS, AWS, Azure, GCP, Windows, Linux, Splunk, Microsoft Sentinel, ServiceNow, Jira, CMDB, Power BI, Python, PowerShell, REST APIs, SIEM, and SOAR.

Requirements

• Bachelor's degree in IT, Cybersecurity, Computer Science, Business, or a related field, or equivalent professional experience.
• 4–8 years of hands‑on experience in Vulnerability Management, Security Engineering, Infrastructure Security, or a related cybersecurity discipline.
• Strong experience with Qualys VMDR, Tenable, Rapid7, or equivalent enterprise vulnerability management platforms.
• Proven experience managing the complete vulnerability lifecycle in complex enterprise environments.
• Strong understanding of CVE, CVSS, CPE, exploitability, vulnerability severity, risk acceptance, compensating controls, and remediation methodologies.
• Technical knowledge of Windows, Linux, networking, servers, databases, middleware, virtualization, and cloud infrastructure.
• Experience coordinating remediation, managing SLAs and escalations, validating fixes, and communicating with stakeholders.
• Strong analytical, troubleshooting, documentation, prioritization, and organizational skills.

Skills

Attack Surface Management (ASM) Cloud Security (AWS, Azure, GCP) CVE and CVSS Analysis Python and PowerShell Scripting Qualys VMDR Rapid7 Risk-Based Vulnerability Prioritization ServiceNow and Jira Tenable Vulnerability Assessment Vulnerability Management Vulnerability Remediation Vulnerability Reporting and SLA Management Vulnerability Scanning and Validation Windows and Linux Security