Vulnerability Management & Configuration Assurance (VMCA) Engineer

Veriipro; Boston (MA); On-site; USD 150,000 - 190,000; Full time

Job summary

Veriipro is seeking a Senior Vulnerability Management & Configuration Assurance (VMCA) Engineer to own vulnerability management tooling, integrations, configuration assurance, and security reporting across on-prem, cloud, and hybrid environments. You will optimize vulnerability data, manage tools like Qualys, Wiz, Nessus, and Rapid7, and develop automation to improve remediation workflows.

The role includes guidance to security and infrastructure teams and ensures compliance with industry

Qualifications

• Must have substantial hands-on vulnerability management and configuration assurance experience.
• Experience integrating vulnerability platforms with enterprise systems (ServiceNow CMDB, SecOps, SIEM).
• Strong scripting skills in Python and PowerShell or similar.
• Deep knowledge of secure configuration baselines and continuous compliance.
• Experience across AWS, Azure, GCP, and hybrid environments.

Responsibilities

• Own and optimize vulnerability management platforms and data quality.
• Manage and troubleshoot tools such as Qualys, Wiz, Nessus, and Rapid7.
• Design and maintain integrations between vulnerability platforms and enterprise systems.
• Develop automation and orchestration to improve scanning, reporting, and remediation workflows.
• Drive configuration assurance and continuous compliance against baselines.
• Provide leadership and guidance to security and infrastructure teams.

Skills

Vulnerability management

Configuration management

Automation scripting

Security dashboards

Tools

Qualys

Wiz

Nessus

Rapid7

ServiceNow CMDB

SecOps

SIEM

Job description

We are seeking aSenior Vulnerability Management & Configuration Assurance (VMCA) Engineer to take end-to-end ownership of vulnerability management tooling, integrations, configuration assurance, and security reporting across on-premises, cloud, and hybrid environments.

Key Responsibilities

• Own and optimize enterprise vulnerability management platforms and ensure accurate, complete, and actionable vulnerability data.
• Manage and troubleshoot tools such asQualys, Wiz, Nessus, and Rapid7.
• Design and maintain integrations between vulnerability platforms and enterprise systems such asServiceNow CMDB, SecOps, and SIEM.
• Develop automation and orchestration usingPython, PowerShell, or similar scripting technologies.
• Improve vulnerability scanning, reporting, remediation workflows, and data quality through automation.
• Drive configuration assurance and continuous compliance against secure configuration baselines.
• Support vulnerability and configuration risk management acrossAWS, Azure, GCP, on-premises, and hybrid environments.
• Develop dashboards, KPIs, metrics, and executive-level reporting to communicate security posture and remediation progress.
• Perform troubleshooting, root-cause analysis, platform optimization, and vendor coordination for tool-related issues.
• Establish risk-based prioritization and remediation processes across the enterprise.
• Ensure security processes align with frameworks and regulations such asNIST, CIS, ISO, and NY DFS.
• Provide technical leadership, mentoring, and subject matter expertise to security and infrastructure teams.
• Translate complex technical vulnerabilities and configuration risks into clear, actionable recommendations for technical and executive stakeholders.

Required Technical Skills

• 8–10+ yearsof experience in Cyber Security, Vulnerability Management, Configuration Management, or a related field.
• Strong hands-on experience withQualys, Wiz, Nessus, and/or Rapid7.
• Experience integrating vulnerability platforms withServiceNow CMDB, SecOps, SIEM, or similar enterprise platforms.
• Strong scripting and automation skills usingPython and/or PowerShell.
• Advanced knowledge ofsecure configuration baselines and continuous compliance validation.
• Strong understanding ofWindows/Linux operating systems and enterprise infrastructure security.
• Experience withAWS, Azure, GCP, and hybrid infrastructure security.
• Strong experience developingsecurity dashboards, metrics, KPIs, and executive reports.
• Excellent troubleshooting, root-cause analysis, and platform optimization skills.
• Knowledge ofNIST, CIS, ISO, and NY DFS security and compliance requirements.