Vulnerability Management Engineer (Hybrid)

Ulta Beauty, Inc.; Bolingbrook (IL); Hybrid; USD 91,000 - 120,000; Full time

Benefits offered by this job

Health insurance

Paid time off

Life insurance

Disability benefits

Job summary

Ulta Beauty is seeking an Engineer - Vulnerability Management to design, implement, and maintain a robust vulnerability program across on-prem, cloud, containers, and SaaS environments. You’ll deploy scanning tools, tune configurations, and drive risk-based remediation with stakeholders across Infra, Cloud, and App teams.

The role emphasizes automation, CI/CD integration, asset discovery, and governance metrics.

Qualifications

• Bachelor's degree in Computer Science, CIS, or equivalent experience (5+ years in cybersecurity).
• Certifications such as CISSP preferred.
• Experience in vulnerability management and enterprise security operations.

Responsibilities

• Vulnerability identification and scanning across on-prem, cloud, and endpoints.
• Prioritize findings using context like EPSS, KEV, and asset criticality.
• Drive remediation with Infra/Platform, Cloud, App teams and ticketing systems.
• Maintain accurate asset inventory across endpoints, servers, containers, and cloud.
• Tune detection rules and run root cause analyses for chronic issues.
• Publish dashboards and align with CSF/ISO and audit requirements.
• Integrate scanning into CI/CD pipelines and enforce policy gates.
• Collaborate with Infra/Platform, Cloud, AppSec, and Biz Owners.
• Build automation for asset enrichment, ticketing, and reporting.
• Evaluate new capabilities (ASM/CNAPP) and drive vendor rationalization.

Skills

Analytical thinking

Troubleshooting

Communication skills

Cross-functional collaboration

Education

Bachelor's degree in Computer Science or related (5+ years cybersecurity)

Tools

Tenable Security Center

Falcon Exposure Management

Qualys

SIEM/EDR/XDR tooling

Job description

Ulta Beauty is seeking an Engineer - Vulnerability Management to design, implement, and maintain a robust vulnerability program across on-prem, cloud, containers, and SaaS environments. You’ll deploy scanning tools, tune configurations, and drive risk-based remediation with stakeholders across Infra, Cloud, and App teams.

The role emphasizes automation, CI/CD integration, asset discovery, and governance metrics.