Vulnerability Engineer

CBTS; United States; On-site; USD 80,000 - 85,000; Full time

Job summary

A technology services company is seeking a highly skilled Vulnerability and Risk Management Specialist to support its risk management program. The ideal candidate will have extensive experience with Qualys Vulnerability Management and be proficient in data visualization tools like Brinqa or Power BI. The role involves tracking vulnerabilities, building customized dashboards, and ensuring KPI compliance while collaborating with various stakeholders, primarily in the Eastern Time Zone. This positions offers a competitive salary of $80,000 - $85,000 with a full-time commitment, requiring U.S. citizenship or a green card.

Qualifications

• 3+ years of experience in vulnerability management or cybersecurity.
• Strong hands-on experience with Qualys and related modules.
• Proficiency in building dashboards using analytics platforms.
• Solid understanding of risk management frameworks and governance.

Responsibilities

• Manage vulnerability risks and track remediation progress.
• Build and automate reporting for stakeholders.
• Monitor KPIs and manage escalation processes efficiently.
• Collaborate with IT and business leaders for risk remediation.

Skills

Qualys Vulnerability Management

Risk analysis

Data visualization

Analytical skills

Communication skills

Tools

Power BI

Brinqa

Job description

Position: Qualys & Prisma Vulnerability - Risk Management Specialist

Location: Remote or Eastern Time Zone Mandatory

Type: Full-Time - No Sponsorship, NO C2C, NO OPT - MUST BE US Citizen or Green Card

Pay: $80,000 - $85,000

CBTS is seeking a highly skilled Qualys and Prisma Security Analyst to support our vulnerability and risk management program. The ideal candidate has strong hands-on experience with Qualys Vulnerability Management, advanced reporting/visualization skills using Brinqa or Power BI, and a solid understanding of risk management best practices. This role involves designing dashboards, analyzing vulnerability risk trends, managing KPI/SLA breaches, and partnering closely with business stakeholders operating in the Eastern Time Zone.

Responsibilities

• Vulnerability & Risk Management
• Perform ongoing vulnerability analysis using Qualys Vulnerability Management (VMDR) or related Qualys modules.
• Evaluate, prioritize, and categorize vulnerabilities based on organizational risk criteria.
• Track remediation progress and escalate issues in alignment with risk management best practices.

Reporting, Dashboards & Visualization

• Build custom dashboards, reports, and visualizations using Brinqa, Power BI, or similar analytics platforms.
• Develop automated or scheduled reporting to support leadership, risk committees, and technical teams.
• Translate complex vulnerability data into meaningful insights for both technical and non-technical audiences.

KPI/SLA Governance

• Monitor vulnerability remediation KPIs/SLA targets across multiple business units.
• Identify KPI breaches and drive escalation workflows with technical teams, risk owners, and leadership.
• Provide detailed KPI/SLA breach analyses and recommend corrective actions.

Stakeholder Engagement

• Collaborate with IT, Engineering, and Business leaders to ensure timely risk remediation.
• Facilitate vulnerability review meetings and communicate risk impacts effectively.
• Partner with teams and leadership aligned to Eastern Time Zone schedules.
• Recommend enhancements to vulnerability management processes, tooling, and reporting.
• Contribute to the development of risk scoring methodologies and data quality improvements.
• Support audit and compliance requirements related to vulnerability and risk management.

Qualifications

• 3+ years of experience in vulnerability management, risk analysis, or cybersecurity operations.
• Strong hands-on experience with Qualys (VMDR or equivalent modules).
• Proficiency in building dashboards and reports using Brinqa, Power BI, or similar tools.
• Solid understanding of risk frameworks and KPI/SLA governance.
• Experience escalating issues and communicating risk within structured risk management processes.
• Ability to work and collaborate with teams operating on Eastern Time Zone schedules.
• Strong analytical and communication skills with the ability to simplify complex data.

Preferred Qualifications

• Experience with additional GRC/Risk platforms (ServiceNow, Archer, Brinqa integrations, etc.).
• Familiarity with CVSS, threat intelligence, or vulnerability prioritization tooling (e.g., threat-based scoring).
• Certifications such as Security+, CySA+, CEH, or comparable.