Senior Vulnerability & Security Engineer - Remote

engineeringjobs.net, Inc.; United States; Remote; USD 100,000 - 170,000; Full time

Benefits offered by this job

Premium medical package

Lunch Tickets

Bookster subscription

13th salary/yearly bonuses

Startup-mentality with international展

Flexible remote work

Job summary

Qualysoft, a Vienna-based software engineering company with global reach, seeks a Vulnerability Management and Security Compliance Specialist.

You will manage end-to-end vulnerability lifecycles, perform scans with Qualys, Tanium and PingCastle, and coordinate remediation with IT, security, and business teams.

The role requires strong analytical skills, scripting in Python/PowerShell, and experience with ELK, Power BI, and Power Query to produce security KPIs and dashboards.

Qualifications

• Hands-on experience with vulnerability management and security compliance in complex enterprise environments.
• Experience with Qualys, Tanium, and PingCastle.
• Knowledge of ELK Stack, Power BI, and Power Query for security monitoring.
• Strong understanding of security frameworks and standards including NIST, CIS Benchmarks, OWASP, ISO 27001, PTES, ISSAF, and OSSTMM.
• Technical knowledge of Windows, Linux, Cloud, networking, infrastructure security, patch management, and system hardening.
• Ability to perform detailed analysis of standard network protocols and security-related infrastructure behavior.
• Scripting and automation skills using Python, PowerShell, and Regular Expressions (Regex).
• Experience managing vulnerability remediation processes, including SLA tracking, risk assessment, exception management, and stakeholder coordination.
• Ability to analyze technical vulnerabilities and translate findings into clear remediation actions for technical stakeholders.
• Experience with Agile environments, project coordination, process design, and continuous improvement.
• Strong analytical, organizational, and problem-solving skills with high attention to detail.
• Strong communication and cross-functional collaboration skills.
• Fluent French, both written and spoken, and a good command of English.

Responsibilities

• Manage the end-to-end vulnerability and security compliance lifecycle, from scan preparation and execution to analysis, remediation tracking, and reporting.
• Perform and analyze vulnerability and compliance scans using Qualys, Tanium, PingCastle, and related security tools.
• Identify vulnerabilities, security weaknesses, configuration issues, and technical non-compliance across Windows, Linux, On-Premises, DMZ, and Cloud environments.
• Coordinate remediation activities with infrastructure, security, application, and business teams, ensuring vulnerabilities are addressed within defined SLAs.
• Validate security configurations, patch management, and infrastructure compliance against internal and industry security standards.
• Define vulnerability ownership, provide remediation recommendations, maintain action plans, and eliminate remediation risks or delays.
• Produce and maintain security KPIs, dashboards, and operational indicators using tools such as ELK Stack, Power BI, and Power Query.
• Maintain and improve vulnerability scanning coverage across infrastructure and cloud environments.
• Ensure operational availability and lifecycle management of vulnerability management platforms, including upgrades, patching, incident resolution, and maintenance.
• Perform technical assessments and Proofs of Concept (PoCs) for new security capabilities and tooling improvements.
• Monitor evolving security requirements and identify compliance gaps, proposing remediation and convergence plans.
• Collaborate with Security, Governance, IT Risk Management, infrastructure, and business security teams on vulnerabilities, exceptions, and security impact assessments.
• Maintain technical documentation, operational procedures, security guidelines, and contingency plans.
• Continuously improve vulnerability management processes, automation, reporting, and security controls.

Skills

Vulnerability Management

Security Compliance

Operational Security

Qualys

Tanium

PingCastle

ELK Stack

Power BI

Power Query

Python

PowerShell

Regex

SLA tracking

Automation

Education

Bachelor's degree in CS/IT

Tools

Qualys

Tanium

PingCastle

ELK Stack

Power BI

Power Query

Python

PowerShell

Job description

Qualysoft, a Vienna-based software engineering company with global reach, seeks a Vulnerability Management and Security Compliance Specialist.

You will manage end-to-end vulnerability lifecycles, perform scans with Qualys, Tanium and PingCastle, and coordinate remediation with IT, security, and business teams.

The role requires strong analytical skills, scripting in Python/PowerShell, and experience with ELK, Power BI, and Power Query to produce security KPIs and dashboards.