Vulnerability Management Engineer – Cloud & On-Prem

Federal Home Loan Bank of Pittsburgh; Pittsburgh (Allegheny County); On-site; USD 95,000 - 125,000; Full time

Job summary

Federal Home Loan Bank of Pittsburgh is seeking a Vulnerability Management Systems Engineer to strengthen security by evaluating and remediating vulnerabilities across on-premises and cloud environments. The role emphasizes technical analysis, hands-on engineering, risk evaluation, and cross-team collaboration to support secure operations and resilient infrastructure.

The position covers the full vulnerability management lifecycle, from discovery to reporting, while guiding remediation

Qualifications

• Bachelor's degree or equivalent experience.
• 5+ years in technical support.
• 3+ years as a Windows system administrator.
• Experience with vulnerability analysis and patching.
• Knowledge of vulnerability scoring (CVSS).
• Proven analytical and troubleshooting abilities.
• Strong communication and cross-team collaboration.
• Experience with automation and engineering practices (Terraform, CI/CD).

Responsibilities

• Analyze vulnerabilities to determine impact and remediation actions.
• Coordinate remediation with infrastructure and application teams.
• Develop frameworks and workflows for consistent remediation across servers, apps, and cloud environments.
• Automate assessment and remediation routines where possible.
• Monitor remediation progress, stability, and performance during patches or configuration changes.
• Provide reporting on vulnerability trends and risk reduction.

Skills

Vulnerability management

Analytical thinking

Effective communication

Multi-project handling

Education

Bachelor of Science in Information Systems

Tools

Terraform

CI/CD

AI-driven tooling

Job description

Federal Home Loan Bank of Pittsburgh is seeking a Vulnerability Management Systems Engineer to strengthen security by evaluating and remediating vulnerabilities across on-premises and cloud environments. The role emphasizes technical analysis, hands-on engineering, risk evaluation, and cross-team collaboration to support secure operations and resilient infrastructure.

The position covers the full vulnerability management lifecycle, from discovery to reporting, while guiding remediation