Vulnerability Management Engineer

WideNet Consulting Group; Seattle (WA); Hybrid; USD 103,000 - 117,000; Part time

Job summary

WideNet Consulting Group is seeking a senior vulnerability management engineer to advance the enterprise VM program. You will cover detection, prioritization, reporting, and remediation across endpoints, cloud workloads, and on-prem systems.

You will implement or migrate VM platforms (Tenable/Qualys/Rapid7/Tanium), build data-driven prioritization with business context, and automate workflows using Python, PowerShell, REST APIs, and Power BI.

Qualifications

• 5+ years hands-on vulnerability management or security engineering.
• Experience with at least one enterprise VM platform (Tenable, Qualys, Rapid7, Defender VM, or Tanium).
• Demonstrated experience building prioritization models that incorporate business context, not severity alone.
• Scripting and automation to scale program operations: Python and PowerShell, plus REST API integration.
• Working fluency with KQL or an equivalent query language for security data.
• Experience integrating VM data with CMDB, ITSM, and BI platforms.
• Cloud vulnerability management experience across Azure and at least one other provider.
• Ability to work independently and produce written deliverables without heavy oversight.

Responsibilities

• Maintain and expand VM coverage across endpoints, servers, cloud workloads, containers, network devices, and SaaS.
• Reconcile vulnerability data into a single authoritative inventory.
• Design program metrics and dashboards, including Power BI reporting.
• Drive remediation campaigns with IT operations and automate ticketing and closure.
• Perform closed-loop verification that remediation reduced exposure.

Skills

Vulnerability management

Security engineering

Python

PowerShell

REST API

KQL

Tools

Tenable

Qualys

Rapid7

Tan ium

Job description

Job Description:

Location: This position requires the candidate to work onsite 2-3 days a week in Seattle, WA. Potential opening for remote candidates in PST.

Job Description:

This position supports advancing the enterprise vulnerability management program across four functional pillars: Detect, Prioritize, Report, Remediate.

Detect

• Maintain and expand scan and sensor coverage across endpoints, servers, cloud workloads, containers, network devices, and SaaS
• Close asset visibility gaps, including shadow IT, unmanaged devices, and assets provisioned outside IT
• Tune authenticated scanning, credential health, agent health, and scan cadence to reduce false negatives
• Reconcile vulnerability data across multiple sources into a single authoritative inventory

Prioritize

• Build and operate risk-based prioritization that blends CVSS severity, EPSS likelihood, CISA KEV exploitation status, and SSVC decision logic
• Enrich findings with business context: asset criticality, data classification, internet exposure, compensating controls, application owner, and business unit
• Replace severity-only queues with defensible, tiered remediation SLAs
• Operate the exception and risk acceptance workflow, including expiration and re-review

Report

• Design and publish program metrics: coverage, mean time to remediate by tier, backlog aging, SLA compliance, and burndown
• Deliver executive and operational dashboards, including Power BI reporting fed by automated pipelines
• Produce audit and assurance evidence on request
• Translate technical findings into business risk language for non-technical stakeholders

Remediate

• Drive remediation campaigns in partnership with IT operations, endpoint, cloud, and application teams
• Automate ticket creation, routing, and closure into the ITSM platform
• Perform closed-loop verification that remediation actually reduced exposure
• Support emergency response for actively exploited vulnerabilities

Platform and program

• Direct, hands-on experience implementing or migrating to a new enterprise vulnerability management platform, including requirements definition, proof of concept, integration, data migration, and rollout
• Direct experience driving continuous improvement to an established VM program, including maturity assessment, process redesign, and runbook development

Required Qualifications

• 5+ years hands-on vulnerability management or security engineering
• Direct implementation experience with at least one enterprise VM platform (Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management, or Tanium)
• Demonstrated experience building prioritization models that incorporate business context, not severity alone
• Scripting and automation to scale program operations: Python and PowerShell, plus REST API integration
• Working fluency with KQL or an equivalent query language for security data
• Experience integrating VM data with CMDB, ITSM, and BI platforms
• Cloud vulnerability management experience across Azure and at least one other provider
• Ability to work independently and produce written deliverables without heavy oversight

Preferred

• Experience with Tanium and Microsoft Defender for Endpoint as data sources
• Container and image scanning experience
• Familiarity with NVD, EPSS, KEV, and ExploitDB data feeds and their API consumption patterns
• Exposure to CTEM or exposure management program models
• Certifications: CISSP, GIAC (GEVA, GCIA), AZ-500

Pay Range: $75.00 – $85.00 per hour, depending upon experience.

Health & Medical Benefits, 401K, Employee Assistance Program, and Sick Time applicable by state.

SLA

Describe hiring preference(C/CTH/FTE)

12 month contract

Bill rate or FTE Salary range and target

Target rate: We need to make our best offer, so let's discuss rates, keeping in mind they can go a bit higher than for our other clients.

Potential target: $140 to $155/hr

Work Authorization Requirements

No C2C without approval 1099 ok

Budget Confirmed?

Yes

Why is the position open?

New role

How long has the position been open?

Just opened

Is there HR/vendor competition? Exclusive?

Competition – this is an RFP process

Interview Process

• 2 interviews – likely team fit/leadership + technical

Work location

• Local and onsite 2-3 days a week is ideal and will be prioritized over remote
• Open to remote but must be in PST. This is not preferred.

Project overview

Advance the enterprise vulnerability management program across four functional pillars: Detect, Prioritize, Report, Remediate.

Top 5

• 5+ years hands-on vulnerability management or security engineering
• Direct implementation experience with at least one enterprise VM platform (Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management, or Tanium)
• Demonstrated experience building prioritization models that incorporate business context, not severity alone
• Scripting and automation to scale program operations: Python and PowerShell, plus REST API integration
• Working fluency with KQL or an equivalent query language for security data

Nice to Have

• Experience with Tanium and Microsoft Defender for Endpoint as data sources
• Container and image scanning experience
• Familiarity with NVD, EPSS, KEV, and ExploitDB data feeds and their API consumption patterns
• Exposure to CTEM or exposure management program models
• Certifications: CISSP, GIAC (GEVA, GCIA), AZ-500