Senior Vulnerability & Posture Engineer (CTEM)

Cencora; Philadelphia (Philadelphia County); On-site; USD 120,000 - 180,000; Full time

Job summary

Cencora is seeking an Engineer III - Vulnerability Management to identify, analyze, prioritize, and drive remediation of vulnerabilities across enterprise environments. You will support CTEM activities, operate postures across cloud and on-premises, and collaborate with stakeholders to measurably reduce cyber risk.

The role emphasizes vulnerability lifecycle mastery, cross-functional coordination, and the development of actionable risk-based priorities with dashboards and governance rigor.

Qualifications

• 7-10 years in IT/cybersecurity roles including hands-on vulnerability management.
• Active security certification (CISSP, CISM, Security+ or similar).
• Experience with vulnerability lifecycle and remediation workflows.

Responsibilities

• Perform advanced vulnerability analysis across enterprise assets.
• Lead CTEM processes and remediation prioritization.
• Operate and improve vulnerability, exposure, and posture management tools.
• Analyze data from multiple sources and prioritize risk-based remediation.
• Coordinate cross-functional remediation with various tech teams.
• Create dashboards and reporting for trends, SLA performance, and program maturity.
• Support scalable vulnerability management workflows and governance.

Skills

Strong analytical skills

Communication

Cross-functional coordination

Mentorship / leadership

Education

Bachelor’s degree in Cybersecurity, CS, IS, IT, Engineering

Tools

Qualys

Tenable

Rapid7 InsightVM

Microsoft Defender Vulnerability Management

Wiz

Armis

CAASM

EASM

RBVM

CSPM

SaaS posture tools

ServiceNow SecOps

Jira

Power BI

Excel

SQL

Python

PowerShell

APIs

Job description

Cencora is seeking an Engineer III - Vulnerability Management to identify, analyze, prioritize, and drive remediation of vulnerabilities across enterprise environments. You will support CTEM activities, operate postures across cloud and on-premises, and collaborate with stakeholders to measurably reduce cyber risk.

The role emphasizes vulnerability lifecycle mastery, cross-functional coordination, and the development of actionable risk-based priorities with dashboards and governance rigor.