Senior Vulnerability & Posture Engineer (CTEM)

Cencora; United States; Remote; USD 140,000 - 210,000; Full time

Benefits offered by this job

Medical care

Dental care

Vision care

Paid parental leave

Training programs

Mentorship

Job summary

Cencora seeks an Engineer III - Vulnerability Management to identify, analyze, and prioritize vulnerabilities across enterprise environments. You will lead CTEM activities, operate posture tools, and collaborate with tech and business teams to measurably reduce cyber risk.

Responsibilities include building dashboards, guiding remediation, and maturing a unified vulnerability management program in a complex, cloud and on‑premises landscape.

Qualifications

• Bachelor’s degree or equivalent practical experience.
• 7–10 years in IT/cybersecurity with vulnerability exposure.
• 4+ years in vulnerability/attack surface management.
• Active cybersecurity certification (e.g., CISSP, CISM, OSCP).
• Knowledge of vulnerability lifecycle and reporting.

Responsibilities

• Perform advanced vulnerability analysis across environments.
• Lead CTEM processes and remediation prioritization.
• Operate vulnerability, attack surface, and cloud posture tools.
• Model risk with asset context, threat intel, and controls.
• Drive remediation with cross-functional teams and governance.

Skills

Cybersecurity

Vulnerability management

CTEM

Risk-based decision making

Cross-functional coordination

Data analysis

Excel

Power BI

SQL

Education

Bachelor’s degree in Cybersecurity / CS / IT / Eng

Tools

Qualys

Tenable

Rapid7 InsightVM

Microsoft Defender Vulnerability Management

CAASM / EASM tools

ServiceNow SecOps

Jira

SOAR

Power BI

Job description

Cencora seeks an Engineer III - Vulnerability Management to identify, analyze, and prioritize vulnerabilities across enterprise environments. You will lead CTEM activities, operate posture tools, and collaborate with tech and business teams to measurably reduce cyber risk.

Responsibilities include building dashboards, guiding remediation, and maturing a unified vulnerability management program in a complex, cloud and on‑premises landscape.