Senior Vulnerability Management Engineer - Cloud & Security

LPL Financial; Fort Mill (SC); On-site; USD 101,000 - 168,000; Full time

Job summary

LPL Financial is seeking a Senior Vulnerability Management Engineer who can execute and mature the vulnerability program across LPL and its subsidiaries. You will collaborate with infrastructure, cloud, engineering, and application teams, as well as third‑party vendors to ensure vulnerabilities are identified, tracked, and remediated.

This role demands hands‑on expertise with scanning tools (e.g., Qualys, Nessus, Rapid7), cloud security posture management, and applying risk‑based controls in a

Qualifications

• 5+ years of practical experience in information security within a large enterprise.
• 5+ years of vulnerability management experience with tools (Qualys, InsightVM, Rapid7, Wiz, Nessus, etc.).
• Bachelor's or Master's degree in Information Security, Engineering, or Computer Science.

Responsibilities

• Serve as vulnerability management SME across Microsoft, Linux/Unix, virtualization, networking, databases, and cloud.
• Define/implement processes to govern remediation and track vulnerabilities to resolution.
• Lead large enterprise initiatives to improve the Vulnerability Management program.
• Collaborate with security and IT teams and vendors to assess impact and implement mitigations.
• Develop KPIs and metrics for vulnerability management and drive improvements.

Skills

Information security

Vulnerability management

Cloud security knowledge

Communication skills

Education

Bachelor's or Master's in Information Security / Engineering / Computer Science

Tools

Qualys

InsightVM

Rapid7

Wiz

Nessus

Job description

LPL Financial is seeking a Senior Vulnerability Management Engineer who can execute and mature the vulnerability program across LPL and its subsidiaries. You will collaborate with infrastructure, cloud, engineering, and application teams, as well as third‑party vendors to ensure vulnerabilities are identified, tracked, and remediated.

This role demands hands‑on expertise with scanning tools (e.g., Qualys, Nessus, Rapid7), cloud security posture management, and applying risk‑based controls in a