Vulnerability Management Architect - Automation & SecOps

Group 1001; United States; On-site; USD 190,000 - 230,000; Full time

Job summary

Group 1001 is seeking a Senior Vulnerability Management Engineer who blends security expertise with infrastructure know-how to identify, prioritize, and drive remediation across cloud, on-prem, applications, and OT systems.

You will automate the vulnerability lifecycle with SOAR, integrate scanners and cloud platforms, and develop KPI-driven reporting to reduce risk and noise while mentoring teammates.

Qualifications

• Bachelor's degree in CS or related field or equivalent experience.
• 5–7 years in information security, preferably in financial services.
• Experience deploying enterprise vulnerability scanning (Tenable/Defender/Wiz/Tanium).
• Experience automating security platforms (Swimlane/Elastic).
• Strong cloud security knowledge across AWS/Azure/GCP.
• Familiarity with DevSecOps and CI/CD pipelines.
• Knowledge of NIST/ISO/CIS; strong communication and collaboration.

Responsibilities

• Own end-to-end vulnerability management pipeline from discovery to closure.
• Build data-driven prioritization using CVSS, EPSS, KEV and business context.
• Automate workflow via SOAR, APIs, queues and custom scripts.
• Develop KPIs, metrics and trend analyses for risk reduction.
• Integrate scanners, CMDB/EDR, and cloud providers into a single pipeline.
• Dedupe, suppress known-benign, and auto-close on remediation evidence.
• Lead technical response for emergency patch cycles across platforms.

Skills

Automation

SOAR

Cloud security

Vulnerability management

Education

Bachelor's degree in CS/InfoSec

Tools

Tenable

Microsoft Defender

Wiz

Tanium

Swimlane

Elastic

Job description

Group 1001 is seeking a Senior Vulnerability Management Engineer who blends security expertise with infrastructure know-how to identify, prioritize, and drive remediation across cloud, on-prem, applications, and OT systems.

You will automate the vulnerability lifecycle with SOAR, integrate scanners and cloud platforms, and develop KPI-driven reporting to reduce risk and noise while mentoring teammates.