Senior Vulnerability & Security Engineer

Ethereum Technologies; Boston (MA); On-site; USD 120,000 - 160,000; Full time

Job summary

Ethereum Technologies in Boston is seeking a cybersecurity professional to lead vulnerability management across enterprise environments, owning the full lifecycle from identification to closure.

You will collaborate with security engineering, IT operations, and development teams to prioritize remediation, validate fixes, and report risk posture. This role requires hands-on VM platform experience and strong communication skills.

Qualifications

• Bachelor's degree in IT/Cybersecurity/CS or related field (or equivalent experience).
• 4-8 years of hands-on experience in vulnerability management, security engineering, infrastructure security, or related cybersecurity discipline.
• Experience with enterprise vulnerability management platforms: Qualys VMDR, Tenable, Rapid7, or equivalent.
• Strong knowledge of CVE, CVSS, CPE, remediation and risk prioritization.
• Ability to interpret scanner results, investigate findings, and determine remediation actions.
• Experience in large/complex enterprise environments and cross-team remediation coordination.
• Excellent documentation and stakeholder communication skills.

Responsibilities

• Own the complete vulnerability lifecycle: identification, triage, remediation tracking, escalation, and closure.
• Drive remediation across multiple technical teams and stakeholders.
• Validate remediation through rescanning, testing, or evidence assessment.
• Manage high volumes of vulnerability data in a large enterprise environment.

Skills

Vulnerability management

Security engineering

Risk evaluation

CVE/CVSS knowledge

Scanner result analysis

Stakeholder communication

Documentation

Windows/Linux/Networking

Cloud environments

Cross-team coordination

Education

Bachelor's degree in IT / Cybersecurity / CS or related

Tools

Qualys VMDR

Tenable

Rapid7

Job description

Ethereum Technologies in Boston is seeking a cybersecurity professional to lead vulnerability management across enterprise environments, owning the full lifecycle from identification to closure.

You will collaborate with security engineering, IT operations, and development teams to prioritize remediation, validate fixes, and report risk posture. This role requires hands-on VM platform experience and strong communication skills.