Threat & Vulnerability Management Engineer II

AmTrust Financial Services Inc.; Cleveland (OH); On-site; USD 90,000 - 120,000; Full time

Job summary

AmTrust Financial Services Inc. is seeking a Security Engineer II to manage and optimize the organization’s vulnerability management program.

The role focuses on reducing enterprise risk by coordinating discovery, validation, remediation, and governance across on‑prem, cloud, and hybrid environments. The ideal candidate will bring hands‑on vulnerability management expertise, strong risk analysis, and the ability to collaborate across security, IT, and business teams to deliver measurable risk

Qualifications

• Bachelor’s degree in CS, IT, Engineering, or related field, or equivalent experience.
• 3+ years in enterprise vulnerability management across on‑prem, cloud, and hybrid.
• Experience with vulnerability platforms and remediation practices.
• Knowledge of CVE, CVSS, CISA KEV, threat intel frameworks.
• Experience securing Azure/AWS/GCP and cloud-native workloads; certifications preferred.

Responsibilities

• Own and evolve the Vulnerability Management Program across the IT environment.
• Manage end-to-end vulnerability lifecycle including discovery, validation, remediation, and reporting.
• Analyze threat actors and trends to inform prioritization and risk decisions.
• Develop automation to streamline vulnerability management and improve efficiency.
• Maintain governance, metrics, reporting, and continuous program improvement.

Skills

Vulnerability management

Threat intelligence

Automation

Risk assessment

Cross-team collaboration

Cloud security

Security tooling

Education

Bachelor’s degree or equivalent experience

Tools

Tenable

Qualys

Rapid7

Microsoft Defender VM

Job description

AmTrust Financial Services Inc. is seeking a Security Engineer II to manage and optimize the organization’s vulnerability management program.

The role focuses on reducing enterprise risk by coordinating discovery, validation, remediation, and governance across on‑prem, cloud, and hybrid environments. The ideal candidate will bring hands‑on vulnerability management expertise, strong risk analysis, and the ability to collaborate across security, IT, and business teams to deliver measurable risk