Senior Vulnerability Management Engineer

Cinter Networks, Inc.; United States; On-site; USD 83,000 - 152,000; Part time

Job summary

Cinter Networks, Inc. in Plano, TX is seeking a Senior Vulnerability Management Engineer to lead the end-to-end vulnerability lifecycle. The role focuses on identification, triage, remediation, validation, and closure across enterprise environments.

You will analyze CVE data, threat intelligence, and risk factors; coordinate with infrastructure, cloud, and security teams; and ensure timely remediation while maintaining accurate dashboards and reports.

Qualifications

• Hands-on vulnerability lifecycle experience in enterprise environments.
• Solid understanding of CVE, CVSS and remediation strategies.
• Ability to prioritize risk beyond CVSS scores.
• Experience with large-volume vulnerability programs.
• Familiarity with remediation SLAs and governance processes.
• Excellent documentation and stakeholder management skills.

Responsibilities

• Own vulnerability findings from identification through remediation and closure.
• Analyze vulnerability data using CVE, CVSS, KEV and threat intel.
• Investigate findings for severity, root cause, and ownership.
• Identify false positives, duplicates, and accepted risks.
• Collaborate with infrastructure, cloud, and security teams to remediate.
• Track remediation timelines and escalations for critical issues.
• Provide remediation guidance and mitigation strategies to stakeholders.
• Validate remediation via rescans and evidence reviews.
• Operate enterprise vulnerability platforms (Qualys VMDR, Tenable, Rapid7).
• Maintain asset inventories, dashboards, and data accuracy in tools.
• Develop risk-based metrics and vulnerability trend reports.
• Mentor junior security team members and improve processes.

Skills

Vulnerability management

Analytical thinking

Cross-functional collaboration

Stakeholder communication

Automation scripting

Cloud & infra familiarity

Threat intelligence

remediation prioritization

Education

Bachelor's degree in IT/Cybersecurity/CS

Tools

Qualys VMDR

Tenable

Rapid7

ServiceNow/Jira

Job description

Job Details

• Job Title: Senior Vulnerability Management Engineer


• Client: Japanese Global Automotive Group / Cybersecurity Division


• Working Location: Plano, TX


• Employment Type: Contract


• Visa Support: No


• Working Hours: Standard Business Hours (CST)


• Language: English Fluent

Key Responsibilities

• Own vulnerability findings from identification and technical triage through remediation, validation, and closure.


• Analyze vulnerability data using CVE, CVSS, CISA KEV, EPSS, threat intelligence, exploitability, exposure, and business impact.


• Investigate findings to determine applicability, severity, root cause, ownership, and organizational risk.


• Identify false positives, duplicate findings, accepted risks, compensating controls, and exception cases.


• Partner with infrastructure, application, cloud, security, and business teams to drive remediation efforts.


• Track vulnerabilities against remediation timelines and SLAs, escalating overdue or critical issues when necessary.


• Provide technical guidance, remediation recommendations, and mitigation strategies to stakeholders.


• Validate remediation through rescans, manual reviews, testing, and supporting evidence.


• Operate and optimize enterprise vulnerability management platforms such as Qualys VMDR, Tenable, Rapid7, or similar tools.


• Maintain asset inventories, tagging, scan coverage, dashboards, reporting, and data accuracy within vulnerability platforms.


• Develop risk-based metrics and reporting on vulnerability trends, remediation effectiveness, aging, and recurring weaknesses.


• Collaborate with Asset Management, Security Operations, Threat Intelligence, Governance, Cloud, and Infrastructure teams.


• Maintain vulnerability management procedures, playbooks, and supporting documentation.


• Identify opportunities for automation and continuous improvement of vulnerability management processes.


• Provide technical mentorship and guidance to junior security team members.

The Right Candidate Will Possess

• Hands-on experience managing the complete vulnerability lifecycle in enterprise environments.


• Strong analytical skills with the ability to prioritize risk beyond CVSS scores.


• Deep understanding of vulnerability assessment, remediation strategies, and security best practices.


• Ability to communicate technical findings clearly to both technical and non-technical stakeholders.


• Experience working across infrastructure, cloud, application, and security teams.


• Strong ownership mindset and ability to independently drive remediation efforts.


• Experience operating vulnerability management platforms and managing large volumes of findings.


• Passion for cybersecurity, threat intelligence, risk management, and continuous improvement.

Required Qualifications & Skills

• 4-8 years of hands‑on experience in Vulnerability Management, Security Engineering, Infrastructure Security, or related cybersecurity disciplines.


• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Business, or a related field (or equivalent experience).


• Demonstrated experience owning vulnerabilities through identification, triage, prioritization, remediation, validation, and closure.


• Strong hands‑on experience with Qualys VMDR, Tenable, Rapid7, or equivalent enterprise vulnerability management platforms.


• Strong knowledge of CVE, CVSS, CPE, vulnerability prioritization, exploitability analysis, compensating controls, and risk acceptance processes.


• Ability to independently assess scanner findings and determine appropriate remediation actions.


• Experience managing high-volume vulnerability programs in complex enterprise environments.


• Experience coordinating remediation efforts across multiple technical and business teams.


• Experience validating remediation through rescanning, evidence assessment, testing, or manual review.


• Strong working knowledge of Windows, Linux, networking, databases, middleware, virtualization, and cloud environments.


• Understanding of patch management, configuration hardening, software upgrades, compensating controls, and system remediation practices.


• Excellent communication, documentation, troubleshooting, prioritization, and stakeholder management skills.

Preferred Qualifications

• Advanced experience with Qualys VMDR including asset inventory, tagging, dashboards, authentication, reporting, and agent-based assessments.


• Experience with Attack Surface Management (ASM) or External Exposure Management technologies.


• Experience supporting AWS, Microsoft Azure, or Google Cloud Platform environments.


• Experience integrating vulnerability management solutions with ServiceNow, Jira, SIEM, SOAR, CMDB, or Asset Management platforms.


• Experience with Splunk, Microsoft Sentinel, Power BI, or similar enterprise technologies.


• Knowledge of CISA KEV, EPSS, threat intelligence, and exploit intelligence sources.


• Scripting and automation experience using Python, PowerShell, APIs, or similar technologies.


• Experience supporting remediation SLAs, governance processes, risk exception management, and security frameworks.


• Relevant certifications such as Security+, CISSP, GIAC, Qualys Certifications, or equivalent industry credentials.

No C2C: We do not accept Corp-to-Corp (C2C) arrangements for this position.