Vulnerability Management Engineer

E Primary; Austin (TX); Remote; USD 80,000 - 100,000; Full time

Job summary

An innovative firm is seeking a Vulnerability Management Engineer to enhance its cybersecurity posture. In this role, you will manage the identification, assessment, and mitigation of vulnerabilities across infrastructure and cloud environments. You will work closely with IT and Infosec teams, providing governance and operational support for vulnerability remediation. This position requires a proactive mindset, excellent communication skills, and proficiency in various vulnerability assessment tools. If you're passionate about cybersecurity and eager to make a significant impact in a fast-paced environment, this opportunity is perfect for you.

Qualifications

• 4-6 years of IT and security experience with 2+ years in vulnerability management.
• Requires security certifications like CISSP, CISM, or OSCP.

Responsibilities

• Manage identification, assessment, and mitigation of vulnerabilities.
• Collaborate with IT and Infosec teams for remediation initiatives.

Skills

Vulnerability Management

Communication Skills

Risk Assessment

Data Analysis

Education

Bachelor’s degree in Computer Science

Bachelor’s degree in Cybersecurity

Tools

Qualys

Microsoft Defender for Endpoint

Microsoft Excel

Armis

Job description

Title: Vulnerability Management Engineer
Location: Austin, TX (Remote)
Duration: 6 months temp to perm
Max Rate to Consultant: $50/hr. W-2 hourly

Description: The Vulnerability Management Engineer is responsible for managing the identification, assessment, reporting, and mitigation of infrastructure and cloud vulnerabilities. A candidate for this role will have a mindset of a defender and be able to operate in a fast-paced environment working closely with our infrastructure team that includes Network, Firewall, Hypervisors, Servers, and business application teams.

Key Responsibilities:

• Serve in a contributing role that requires frequent interaction with IT and Infosec managers, engineers, and developers.
• Provide vulnerability remediation governance and operational support.
• Perform vulnerability metrics reporting for ad-hoc and scheduled metrics report for various KPIs (Key Performance Indicators) around vulnerability management activities.
• Drive and track remediation initiatives across multiple support teams.
• Respond to questions from stakeholders about remediation and vulnerability assessment results and actions.
• Collaborate with support groups/stakeholders on details about identified vulnerabilities.

Experience and Educational Requirements:

• Bachelor’s degree in Computer Science, Cybersecurity, or other related field, or equivalent work experience.
• Proficient in various vulnerability assessment tools such as Qualys, Armis, Microsoft Defender for Endpoint/Cloud.
• Ability to analyze vulnerability metrics using Microsoft Excel advanced techniques.
• 4-6 years of combined IT and security work experience with a broad range of exposure to cybersecurity, systems analysis, application development, and/or systems administration and 2+ years of vulnerability management experience.
• Requires Security Certification(s) (i.e., Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM), Certificate of Cloud Security Knowledge (CCSK), Offensive Security Certified Professional (OSCP) or other equivalent recognized security certifications).
• Good understanding of industry standard regulations and risk management frameworks and standards (e.g., ISO, PCI, NIST, COBIT, GAPP, HIPAA, GDPR).
• Familiarity with SANS Top 25 controls, OWASP Top 10, and/or MITRE ATT&CK framework.
• Excellent communication skills: able to explain complex concepts clearly to both technical and non-technical stakeholders.

Skills Desired:

• Exposure or knowledge of cloud architectures, services, and vulnerabilities.
• Understanding of risk assessment methodologies.
• Proficiency in using vulnerability scanning tools such as Qualys, Armis, MS Defender, etc.
• Ability to interpret vulnerability data from multiple sources.