Senior Vulnerability Management Engineer

Cinter Career; Plano (TX); On-site; USD 83,000 - 152,000; Part time

Job summary

Cinter Networks, Inc. in Plano, TX is seeking a Senior Vulnerability Management Engineer to own the complete vulnerability lifecycle—from identification to remediation and validation.

You will work with infrastructure, cloud, and security teams to drive timely remediation and improve security postures. The role emphasizes analyzing CVE/ CVSS data, threat intelligence, and risk-based decision making, using enterprise tools like Qualys VMDR, Tenable, and Rapid7.

Qualifications

• 4–8 years of hands-on experience in Vulnerability Management, Security Engineering, Infrastructure Security, or related cybersecurity disciplines.
• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Business, or related field (or equivalent experience).
• Demonstrated experience owning vulnerabilities through identification, triage, prioritization, remediation, validation, and closure.
• Strong hands-on experience with Qualys VMDR, Tenable, Rapid7, or equivalent enterprise vulnerability management platforms.
• Strong knowledge of CVE, CVSS, CPE, vulnerability prioritization, exploitability analysis, compensating controls, and risk acceptance processes.
• Ability to independently assess scanner findings and determine appropriate remediation actions.
• Experience managing high-volume vulnerability programs in complex enterprise environments.

Responsibilities

• Own vulnerability findings from identification and technical triage through remediation, validation, and closure.
• Analyze vulnerability data using CVE, CVSS, CISA KEV, EPSS, threat intelligence, exploitability, exposure, and business impact.
• Investigate findings to determine applicability, severity, root cause, ownership, and organizational risk.
• Identify false positives, duplicate findings, accepted risks, compensating controls, and exception cases.
• Partner with infrastructure, application, cloud, security, and business teams to drive remediation efforts.
• Track vulnerabilities against remediation timelines and SLAs, escalating overdue or critical issues when necessary.
• Provide technical guidance, remediation recommendations, and mitigation strategies to stakeholders.
• Validate remediation through rescans, manual reviews, testing, and supporting evidence.
• Operate and optimize vulnerability platforms such as Qualys VMDR, Tenable, Rapid7, or similar tools.
• Maintain asset inventories, tagging, scan coverage, dashboards, reporting, and data accuracy within vulnerability platforms.
• Develop risk-based metrics and reporting on vulnerability trends, remediation effectiveness, aging, and recurring weaknesses.
• Collaborate with Asset Management, Security Operations, Threat Intelligence, Governance, Cloud, and Infrastructure teams.
• Maintain vulnerability management procedures, playbooks, and supporting documentation.
• Identify opportunities for automation and continuous improvement of vulnerability management processes.
• Provide technical mentorship and guidance to junior security team members.

Skills

Analytical thinking

Ownership mindset

Stakeholder communication

Prioritization

Education

Bachelor’s degree in Information Technology/Cybersecurity/CS

Tools

Qualys VMDR

Tenable

Rapid7

Windows

Linux

Cloud environments

Python/PowerShell scripting

Job description

Job Details

• Job Title: Senior Vulnerability Management Engineer


• Client: Japanese Global Automotive Group / Cybersecurity Division


• Working Location: Plano, TX


• Employment Type: Contract


• Visa Support: No


• Working Hours: Standard Business Hours (CST)


• Language: English Fluent

Key Responsibilities

• Own vulnerability findings from identification and technical triage through remediation, validation, and closure.


• Analyze vulnerability data using CVE, CVSS, CISA KEV, EPSS, threat intelligence, exploitability, exposure, and business impact.


• Investigate findings to determine applicability, severity, root cause, ownership, and organizational risk.


• Identify false positives, duplicate findings, accepted risks, compensating controls, and exception cases.


• Partner with infrastructure, application, cloud, security, and business teams to drive remediation efforts.


• Track vulnerabilities against remediation timelines and SLAs, escalating overdue or critical issues when necessary.


• Provide technical guidance, remediation recommendations, and mitigation strategies to stakeholders.


• Validate remediation through rescans, manual reviews, testing, and supporting evidence.


• Operate and optimize enterprise vulnerability management platforms such as Qualys VMDR, Tenable, Rapid7, or similar tools.


• Maintain asset inventories, tagging, scan coverage, dashboards, reporting, and data accuracy within vulnerability platforms.


• Develop risk-based metrics and reporting on vulnerability trends, remediation effectiveness, aging, and recurring weaknesses.


• Collaborate with Asset Management, Security Operations, Threat Intelligence, Governance, Cloud, and Infrastructure teams.


• Maintain vulnerability management procedures, playbooks, and supporting documentation.


• Identify opportunities for automation and continuous improvement of vulnerability management processes.


• Provide technical mentorship and guidance to junior security team members.

The Right Candidate Will Possess

• Hands-on experience managing the complete vulnerability lifecycle in enterprise environments.


• Strong analytical skills with the ability to prioritize risk beyond CVSS scores.


• Deep understanding of vulnerability assessment, remediation strategies, and security best practices.


• Ability to communicate technical findings clearly to both technical and non-technical stakeholders.


• Experience working across infrastructure, cloud, application, and security teams.


• Strong ownership mindset and ability to independently drive remediation efforts.


• Experience operating vulnerability management platforms and managing large volumes of findings.


• Passion for cybersecurity, threat intelligence, risk management, and continuous improvement.

Required Qualifications & Skills

• 4-8 years of hands‑on experience in Vulnerability Management, Security Engineering, Infrastructure Security, or related cybersecurity disciplines.


• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Business, or a related field (or equivalent experience).


• Demonstrated experience owning vulnerabilities through identification, triage, prioritization, remediation, validation, and closure.


• Strong hands‑on experience with Qualys VMDR, Tenable, Rapid7, or equivalent enterprise vulnerability management platforms.


• Strong knowledge of CVE, CVSS, CPE, vulnerability prioritization, exploitability analysis, compensating controls, and risk acceptance processes.


• Ability to independently assess scanner findings and determine appropriate remediation actions.


• Experience managing high-volume vulnerability programs in complex enterprise environments.


• Experience coordinating remediation efforts across multiple technical and business teams.


• Experience validating remediation through rescanning, evidence assessment, testing, or manual review.


• Strong working knowledge of Windows, Linux, networking, databases, middleware, virtualization, and cloud environments.


• Understanding of patch management, configuration hardening, software upgrades, compensating controls, and system remediation practices.


• Excellent communication, documentation, troubleshooting, prioritization, and stakeholder management skills.

Preferred Qualifications

• Advanced experience with Qualys VMDR including asset inventory, tagging, dashboards, authentication, reporting, and agent-based assessments.


• Experience with Attack Surface Management (ASM) or External Exposure Management technologies.


• Experience supporting AWS, Microsoft Azure, or Google Cloud Platform environments.


• Experience integrating vulnerability management solutions with ServiceNow, Jira, SIEM, SOAR, CMDB, or Asset Management platforms.


• Experience with Splunk, Microsoft Sentinel, Power BI, or similar enterprise technologies.


• Knowledge of CISA KEV, EPSS, threat intelligence, and exploit intelligence sources.


• Scripting and automation experience using Python, PowerShell, APIs, or similar technologies.


• Experience supporting remediation SLAs, governance processes, risk exception management, and security frameworks.


• Relevant certifications such as Security+, CISSP, GIAC, Qualys Certifications, or equivalent industry credentials.

No C2C: We do not accept Corp-to-Corp (C2C) arrangements for this position.