Vulnerability Management Engineer

Jobtailor; Philadelphia (Philadelphia County); On-site; USD 100,000 - 140,000; Full time

Job summary

Jobtailor in Philadelphia is seeking a security engineer to lead vulnerability management initiatives. You will conduct vulnerability assessments, collaborate with cross-functional teams, and guide remediation activities across systems, networks, and applications.

The role emphasizes automation, scripting (PowerShell/Python), use of Tenable solutions (Tenable.io, Tenable Web App Scanning), and staying current with CVE trends to prioritize risk and reduce exposure.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field; preferred but not required with experience
• 3-5 years of hands-on Tenable solutions experience in a large enterprise
• Certifications such as CISSP, CEH, GIAC or Tenable certifications highly desirable
• Hands-on Tenable Vulnerability Management (Tenable.io) and Nessus experience including deployment, configuration, asset discovery, and reporting
• Experience with Tenable Web App Scanning for web applications/APIs
• Experience designing and maturing an enterprise vulnerability management program
• Advanced scripting and automation skills (PowerShell; Python)
• Ability to create scripts for Tenable administration, data collection, reporting, and remediation workflows
• Experience with Tenable APIs and integrating data with ticketing systems, SIEM/SOAR, CMDBs and dashboards
• Ability to leverage AI tools for vulnerability analysis with controls

Responsibilities

• Conduct vulnerability assessments using Tenable across systems, networks, and applications
• Collaborate with cross-functional teams to analyze and prioritize vulnerabilities based on risk and impact
• Develop and implement vulnerability management processes, procedures, and best practices
• Monitor and track remediation within defined timelines
• Stay current on security vulnerabilities, threats, and industry best practices
• Perform regular vulnerability scanning and penetration testing
• Guide IT teams on configuration changes, patches, and remediation actions
• Provide technical expertise to internal stakeholders on vulnerability management
• Collaborate with Incident Response on vulnerability-related security incidents
• Optimize Tenable configuration, operations, automation, risk-based prioritization, remediation, and reporting
• Expand the program using Tenable capabilities and APIs, including automation
• Advance AI-enabled analysis of vulnerability data for prioritization and remediation decisions

Skills

Tenable Vulnerability Management

Vulnerability Assessment

Penetration Testing

Advanced Scripting

CISSP CEH GIAC

PowerShell

Python

API Integration

CVSS/OWASP/NIST

Data Correlation

Education

Bachelor's degree in Computer Science or Information Security (preferred)

Tools

Tenable.io

Tenable Web App Scanning

Nessus

SIEM/SOAR

CMDBs

Job description

• Conduct vulnerability assessments using Tenable across systems, networks, and applications


• Collaborate with cross-functional teams to analyze and prioritize vulnerabilities based on risk and potential impact


• Develop and implement vulnerability management processes, procedures, and best practices


• Monitor and track remediation within defined timelines


• Stay current on security vulnerabilities, threats, and industry best practices


• Perform regular vulnerability scanning and penetration testing


• Guide IT teams on configuration changes, patches, and other remediation actions


• Provide technical expertise to internal stakeholders on vulnerability management


• Collaborate with the Incident Response team on vulnerability-related security incidents


• Optimize Tenable configuration, operations, automation, risk-based identification, prioritization, remediation, and executive reporting


• Expand the program using Tenable Vulnerability Management, Tenable Web App Scanning, APIs, automation, and applicable Tenable capabilities


• Advance AI-enabled analysis of vulnerability data, patterns, exposures, prioritization, investigation, and remediation decisions

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field, preferred but not required with acceptable experience


• 3-5 years of recent, hands-on experience administering and engineering Tenable solutions in a large enterprise environment acceptable in replacement of education


• Relevant certifications (e.g., CISSP, CEH, GIAC), including Tenable or other vendor certifications, highly desirable


• Recent, hands-on expertise in Tenable Vulnerability Management (Tenable.io) and Nessus, including scanner deployment and management, scan configuration, asset discovery, tagging, credentialed scanning, plugin management, troubleshooting, dashboards, reporting, and platform optimization


• Experience using Tenable Web App Scanning for web applications and APIs


• Experience designing, operating, and maturing an enterprise vulnerability management program


• Advanced scripting and automation skills, particularly PowerShell; Python or similar scripting experience highly desirable


• Ability to create and maintain scripts for Tenable administration, data collection, enrichment, reporting, integrations, remediation workflows, and vulnerability management activities


• Experience with Tenable APIs and integrating vulnerability and asset data with ticketing systems, SIEM/SOAR platforms, CMDBs, asset inventories, dashboards, or other security tools


• Ability and interest in leveraging AI tools for vulnerability analysis, data correlation, pattern identification, prioritization, remediation research, scripting, reporting, and related use cases, with validation and security controls


• Strong understanding of CVE, CVSS, CISA KEV, exploitability, threat intelligence, asset criticality, exposure, compensating controls, and business impact


• Understanding of common vulnerabilities, attack vectors, mitigation techniques, network and application security concepts, and scanner noise or false positives


• Experience with network scanning, authenticated/credentialed scanning, web application scanning, vulnerability validation, and penetration testing or vulnerability exploitation techniques


• Knowledge of CVSS, CVE, OWASP, NIST, and vulnerability management best practices


• Strong analytical, troubleshooting, communication, and problem-solving skills


• Ability to translate technical vulnerability data into remediation guidance and risk information for stakeholders


• Ability to independently identify gaps and implement improvements that increase vulnerability management program maturity

Core Competencies

Demonstrates expertise in vulnerability management, including hands-on experience with Tenable solutions, vulnerability assessments, and remediation processes. Proficient in scripting and automation for optimizing vulnerability management workflows and integrating security tools.

Highest-signal resume keywords

• Tenable Vulnerability Management


• Vulnerability Assessment


• Penetration Testing


• Advanced Scripting Skills


• Relevant Certifications (CISSP, CEH, GIAC)

ATS Optimization Keywords

Hard Skills

• Vulnerability Management


• Tenable.io


• Nessus


• PowerShell


• Python


• Vulnerability Scanning


• API Integration


• CVE Understanding


• Network Security Concepts


• Web Application Scanning

Soft Skills

• Analytical Skills


• Troubleshooting Skills


• Communication Skills


• Problem-Solving Skills

Certifications & Qualifications

• CISSP


• CEH


• GIAC


• Tenable Certifications

Industry Keywords

• CVE


• CVSS


• NIST


• OWASP


• Vulnerability Management Best Practices

Tools & Technologies

• Tenable Web App Scanning


• SIEM/SOAR Platforms


• CMDBs


• Dashboards