VMCA Engineer: Vulnerability & Configuration Lead

Veriipro; Boston (MA); On-site; USD 150,000 - 190,000; Full time

Job summary

Veriipro is seeking a Senior Vulnerability Management & Configuration Assurance (VMCA) Engineer to own vulnerability management tooling, integrations, configuration assurance, and security reporting across on-prem, cloud, and hybrid environments. You will optimize vulnerability data, manage tools like Qualys, Wiz, Nessus, and Rapid7, and develop automation to improve remediation workflows.

The role includes guidance to security and infrastructure teams and ensures compliance with industry

Qualifications

• Must have substantial hands-on vulnerability management and configuration assurance experience.
• Experience integrating vulnerability platforms with enterprise systems (ServiceNow CMDB, SecOps, SIEM).
• Strong scripting skills in Python and PowerShell or similar.
• Deep knowledge of secure configuration baselines and continuous compliance.
• Experience across AWS, Azure, GCP, and hybrid environments.

Responsibilities

• Own and optimize vulnerability management platforms and data quality.
• Manage and troubleshoot tools such as Qualys, Wiz, Nessus, and Rapid7.
• Design and maintain integrations between vulnerability platforms and enterprise systems.
• Develop automation and orchestration to improve scanning, reporting, and remediation workflows.
• Drive configuration assurance and continuous compliance against baselines.
• Provide leadership and guidance to security and infrastructure teams.

Skills

Vulnerability management

Configuration management

Automation scripting

Security dashboards

Tools

Qualys

Wiz

Nessus

Rapid7

ServiceNow CMDB

SecOps

SIEM

Job description

Veriipro is seeking a Senior Vulnerability Management & Configuration Assurance (VMCA) Engineer to own vulnerability management tooling, integrations, configuration assurance, and security reporting across on-prem, cloud, and hybrid environments. You will optimize vulnerability data, manage tools like Qualys, Wiz, Nessus, and Rapid7, and develop automation to improve remediation workflows.

The role includes guidance to security and infrastructure teams and ensures compliance with industry