VMCA Engineer: Vulnerability & Config Risk Leader (Hybrid)

Expedite Talent Solutions; Boston (MA); Hybrid; USD 140,000 - 180,000; Full time

Job summary

Expedite Talent Solutions seeks a Vulnerability Management and Configuration Assurance (VMCA) Engineer in a hybrid capacity, with work locations including Springfield, MA, Boston, MA, or New York, NY. The role demands 8–10 years of experience in managing vulnerabilities, configurations, and risk across diverse environments.

You will lead tooling, integrations, and automation efforts, build dashboards, and deliver executive-level reports on risk posture and remediation progress.

Qualifications

• This role requires 8–10 years of experience in vulnerability management and configuration risk across on-prem, cloud, and hybrid environments.
• Owns end-to-end tooling, integrations, and processes enabling visibility into vulnerabilities and configuration risks.
• Develops and maintains scalable dashboards and executive reporting to show risk posture and remediation progress.

Responsibilities

• Ensure data is accurate, complete, and actionable for risk-based prioritization and remediation.
• Oversee vulnerability management platforms, troubleshoot tool issues, and collaborate with cross-functional teams to improve detection, reporting, and response.
• Develop and maintain dashboards and metrics for vulnerability trends and remediation performance for technical and executive audiences.
• Drive automation, process improvements, and governance to align with regulatory frameworks such as NIST, CIS, ISO, and NY Client.
• Mentor and provide strategic guidance on translating technical risks into actionable insights for leadership.

Skills

Vulnerability management

Automation & scripting

Data analytics

Cross-functional collaboration

Regulatory compliance

Tools

Qualys

Wiz

Nessus

Rapid7

ServiceNow CMDB

SIEM

Python

PowerShell

AWS

Azure

GCP

Job description

Expedite Talent Solutions seeks a Vulnerability Management and Configuration Assurance (VMCA) Engineer in a hybrid capacity, with work locations including Springfield, MA, Boston, MA, or New York, NY. The role demands 8–10 years of experience in managing vulnerabilities, configurations, and risk across diverse environments.

You will lead tooling, integrations, and automation efforts, build dashboards, and deliver executive-level reports on risk posture and remediation progress.