Vulnerability Management Engineer II — IT & OT Security

dfa; Windsong Village Colonia (TX); On-site; USD 90,000 - 120,000; Full time

Job summary

dfa seeks a Vulnerability Management leader to own the VTM program across IT and OT environments, including manufacturing systems and ICS. You will identify, analyze, and track vulnerabilities, coordinate remediation with IT, plant engineers, and operations teams, and develop dashboards for executives.

The role requires 3+ years in vulnerability management, familiarity with CVEs/CVSS, and experience with security frameworks such as NIST-800-53.

Qualifications

• 3+ years in vulnerability management with full lifecycle focus.
• Experience interpreting CVEs, CVSS, exploitability and threat intel.
• Coordinating remediation across IT/OT teams and vendors.
• Aligning activities with NIST-800-53 and security frameworks.
• Experience with manufacturing OT environments preferred.

Responsibilities

• Own day-to-day execution and continuous improvement of the VTM program.
• Identify, analyze, prioritize, and track vulnerabilities across endpoints, servers, networks, cloud, and OT assets.
• Coordinate remediation with IT, plant engineers, and operations teams.
• Develop dashboards, KPIs, and executive-level metrics to measure risk reduction.
• Promote secure configuration and patching best practices across environments.
• Identify automation opportunities to improve remediation efficiency.

Skills

Vulnerability management

Risk prioritization

Executive reporting

Threat intelligence

OT familiarity

Dashboarding

Cross-functional collaboration

Automation opportunities

Education

Information technology degree

Tools

Microsoft Defender for Endpoint

Vulnerability scanning platforms

Job description

dfa seeks a Vulnerability Management leader to own the VTM program across IT and OT environments, including manufacturing systems and ICS. You will identify, analyze, and track vulnerabilities, coordinate remediation with IT, plant engineers, and operations teams, and develop dashboards for executives.

The role requires 3+ years in vulnerability management, familiarity with CVEs/CVSS, and experience with security frameworks such as NIST-800-53.