Senior Vulnerability & Posture Engineer — CTEM

Cencora; Darby (Delaware County); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical, dental, vision

Training & mentorship

Paid parental leave

Wellness programs

Job summary

Cencora is seeking an Engineer III - Vulnerability Management to lead senior-level vulnerability and posture activities across enterprise environments. You will drive remediation priorities, collaborate with infrastructure, cloud, and business teams, and help mature a unified CTEM program with strong analytics and executive reporting.

As a senior contributor, you’ll mentor junior engineers, develop risk-based remediation strategies, and deliver dashboards and governance for vulnerability trends

Qualifications

• Bachelor’s degree in cybersecurity, CS, IS, IT, engineering, or equivalent practical experience.
• 7–10 years in IT/cybersecurity with at least 4 years in vulnerability/attack surface management.
• Active cybersecurity certification (e.g., CISSP, CISM, Security+).
• Strong understanding of vulnerability lifecycle management and risk-based prioritization.
• Experience with vulnerability assessment tools (Qualys, Tenable, InsightVM, Defender VM).
• Experience with CAASM/EASM/RBVM/CSPM/SSPM and external posture management.
• Ability to translate findings into remediation guidance and risk summaries.

Responsibilities

• Perform advanced vulnerability analysis across enterprise assets and cloud environments.
• Lead CTEM processes: scoping, discovery, prioritization, validation, mobilization, and risk reduction.
• Operate and improve vulnerability management, attack surface management, and cloud posture tools.
• Analyze data from multiple sources; normalize findings and establish remediation priorities.
• Coordinate remediation with infrastructure, cloud, network, and development teams.
• Lead exposure management activities and executive-level status reporting.
• Create dashboards and metrics for vulnerability trends and SLA performance.
• Support unified vulnerability management workflows, including ticketing and rescan validation.
• Suggest improvements to scanning coverage, asset inventory quality, and data integrity.
• Translate complex findings for technical and leadership audiences.
• Contribute to standards, playbooks, and continuous improvement initiatives.

Skills

Vulnerability management

CTEM

Risk prioritization

Data analysis

Stakeholder communication

Cross-functional coordination

Cloud security posture

Automation basics

Excel/Power BI

Security frameworks knowledge

Education

Bachelor's degree in Cybersecurity/CS/IS/IT/Engineering

Equivalent practical experience

7-10 years IT/cybersecurity experience

Tools

Qualys

Tenable

Rapid7 InsightVM

Microsoft Defender Vulnerability Management

CAASM

EASM

ServiceNow SecOps

Jira

Power BI

SQL

Job description

Cencora is seeking an Engineer III - Vulnerability Management to lead senior-level vulnerability and posture activities across enterprise environments. You will drive remediation priorities, collaborate with infrastructure, cloud, and business teams, and help mature a unified CTEM program with strong analytics and executive reporting.

As a senior contributor, you’ll mentor junior engineers, develop risk-based remediation strategies, and deliver dashboards and governance for vulnerability trends