Senior Vulnerability & Posture Management Engineer

American Health Packaging; Philadelphia (Philadelphia County); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Cencora is seeking an experienced Engineer III - Vulnerability Management in the United States. The role focuses on identifying, prioritizing, and driving remediation of vulnerabilities and posture findings across enterprise environments, including cloud, on‑prem, and external attack surface.

The engineer will mature CTEM capabilities and collaborate with technology, security, and business stakeholders to measurably reduce cyber risk.

Qualifications

• Bachelor’s degree or equivalent practical experience in a related field.
• 7–10 years in IT, cybersecurity, or related disciplines.
• At least 4 years hands-on vulnerability/overflow management functions.
• Active cybersecurity certification (e.g., CISSP, CISM, Security+).
• Experience with vulnerability scanners: Qualys, Tenable, InsightVM, Defender VM, Wiz.

Responsibilities

• Perform advanced vulnerability analysis across assets and environments.
• Lead CTEM processes including scoping, discovery, prioritization and remediation.
• Operate and improve vulnerability, attack surface, and cloud posture tools.
• Analyze data from multiple sources and develop risk-based remediation priorities.
• Drive remediation with cross-functional teams and governance routines.
• Create dashboards and reporting on vulnerability trends and SLA performance.

Skills

Vulnerability management

CTEM processes

Data analysis

Stakeholder communication

Cross-functional coordination

Education

Bachelor’s degree in Cybersecurity, CS, IS, IT, Engineering, or related field

Tools

Qualys

Tenable

Rapid7 InsightVM

Microsoft Defender Vulnerability Management

Wiz

Job description

Cencora is seeking an experienced Engineer III - Vulnerability Management in the United States. The role focuses on identifying, prioritizing, and driving remediation of vulnerabilities and posture findings across enterprise environments, including cloud, on‑prem, and external attack surface.

The engineer will mature CTEM capabilities and collaborate with technology, security, and business stakeholders to measurably reduce cyber risk.