Senior Vulnerability Management & Response Engineer

Dormont Manufacturing Co; Destin (FL); On-site; USD 110,000 - 160,000; Full time

Job summary

Starr, a global leader in commercial insurance, seeks a Vulnerability Management & Response Engineer to own and improve our enterprise VM program. You will manage end-to-end processes across on-prem and cloud environments using Tenable, driving remediation with asset owners.

You will collaborate with Infrastructure, Development, Risk, and Compliance teams to maintain continuous scanning, meet SLAs, and mature governance through automation and reporting.

Qualifications

• 5+ years of enterprise Vulnerability Management program experience.
• Hands-on Tenable administration, configuration, reporting, and troubleshooting.
• CVSS understanding and risk-based prioritization to drive remediation sequencing.
• Experience patching using SCCM or Intune.
• Strong documentation and process-improvement skills.
• Ability to collaborate across technical and non-technical teams.

Responsibilities

• Own day-to-day operations of the Tenable platform (scan config, scheduling, coverage monitoring, credentials management, results troubleshooting).
• Lead triage, assignment, and validation of vulnerability remediation tasks across infrastructure and application stakeholders.
• Define, maintain, and enforce SLA-based remediation, including escalation and executive reporting for SLA drift.
• Integrate Tenable findings with SCCM, Intune, SOAR, SIEM, and ticketing systems for automated assignment, tracking, and validation.
• Conduct quarterly reconciliation of Tenable scanner output with CMDB and asset inventories to validate coverage and data quality.
• Maintain an auditable exception register with documented risk acceptance and approvals.
• Produce VM program metrics and reporting (weekly, monthly, quarterly, yearly).
• Run a recurring VM governance cadence to review SLA drift, backlog health, etc.
• Support internal audit and regulatory review with evidence and narratives.

Skills

Vulnerability Management

Tenable

Patch management

Cross-functional collaboration

Risk-based prioritization

SCCM

Intune

SIEM

SOAR

Tools

Tenable

SCCM

Intune

SOAR

SIEM

Remedyforce

ServiceNow

Job description

Starr, a global leader in commercial insurance, seeks a Vulnerability Management & Response Engineer to own and improve our enterprise VM program. You will manage end-to-end processes across on-prem and cloud environments using Tenable, driving remediation with asset owners.

You will collaborate with Infrastructure, Development, Risk, and Compliance teams to maintain continuous scanning, meet SLAs, and mature governance through automation and reporting.