Vulnerability Management Engineer - Risk-Driven Security

Ulta Beauty; Bolingbrook (IL); On-site; USD 91,000 - 120,000; Full time

Job summary

Ulta Beauty in Bolingbrook, IL seeks an Engineer - Vulnerability Management to design, implement, and maintain a robust vulnerability program across hybrid environments. You will deploy authenticated scans, drive risk-based prioritization, and coordinate remediation with Infra/Platform, Cloud, and App teams.

The role emphasizes data-driven remediation, collaboration with Security Operations, and governance across scanning, metrics, and audits.

Qualifications

• Bachelor's degree in Computer Science, CIS, or equivalent experience (5+ years in cybersecurity).
• 5+ years in cybersecurity with relevant certifications preferred (CISSP or equivalent).
• Experience with risk-based prioritization, vulnerability management, and security operations.

Responsibilities

• Design, schedule, and optimize authenticated scans for on-prem, cloud, and remote endpoints.
• Prioritize findings using context: EPSS, KEV, network exposure, business impact, and asset criticality.
• Drive remediation by partnering with Infra/Platform, Cloud, and App teams.
• Integrate with ServiceNow VR for ticketing and validation of fixes.
• Assist Security Operations with zero-day/rapid-response playbooks and risk assessments.
• Publish dashboards and reports showing risk trends and SLA adherence.

Skills

Vulnerability management

Vulnerability scanning

Risk prioritization

Threat intelligence

Incident response

CMDB integration

Automation scripting

SIEM/EDR/XDR

Education

Bachelor's degree in Computer Science/CIS or equivalent

Tools

Qualys

Tenable

Rapid7

Falcon Exposure Management

ServiceNow VR

Job description

Ulta Beauty in Bolingbrook, IL seeks an Engineer - Vulnerability Management to design, implement, and maintain a robust vulnerability program across hybrid environments. You will deploy authenticated scans, drive risk-based prioritization, and coordinate remediation with Infra/Platform, Cloud, and App teams.

The role emphasizes data-driven remediation, collaboration with Security Operations, and governance across scanning, metrics, and audits.