Vulnerability Management Lead – Cloud Security & Remediation

Cognizant; New York (NY); On-site; USD 134,000 - 155,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Paid holidays and PTO

401(k) plan and contributions

Disability insurance (Long-term/Short-

Paid Parental Leave

Employee Stock Purchase Plan

Job summary

Cognizant is seeking a Vulnerability Management Engineer to support enterprise vulnerability assessment, remediation coordination, and security tooling administration across infrastructure, cloud, and application domains.

The role requires hands-on experience in vulnerability management, risk-based prioritization, and strong stakeholder communication, with opportunities to influence security posture through dashboards and metrics.

Qualifications

• 5–10 years of cybersecurity experience, including at least 3 years in Vulnerability Management, Security Operations, or Cyber Risk Management.
• Strong hands-on experience with vulnerability assessment, remediation tracking, exposure analysis, and risk-based prioritization.
• Experience administering tools such as Tenable.io, Tenable.sc, Qualys VMDR, Rapid7 InsightVM, ServiceNow Vulnerability Response, Wiz, Prisma Cloud, or Microsoft Defender Vulnerability Management.

Responsibilities

• Conduct authenticated and unauthenticated vulnerability scans across servers, endpoints, networks, databases, cloud platforms, and applications.
• Analyze scan results, validate vulnerabilities, eliminate false positives, and assess potential business and security impact.
• Prioritize vulnerabilities using CVSS, exploitability, threat intelligence, asset criticality, data sensitivity, and business context.
• Coordinate remediation activities with infrastructure, application, cloud, endpoint, and operations teams while tracking closure against established SLAs.
• Support urgent response efforts for critical vulnerabilities, actively exploited weaknesses, and zero-day threats.
• Administer vulnerability management platforms, including scanning policies, asset groups, dashboards, integrations, and reporting templates.
• Review remediation plans, compensating controls, exception requests, and risk acceptance documentation.
• Integrate vulnerability management tools with ServiceNow VR, CMDB, ITSM, ticketing, and reporting platforms.
• Develop operational and executive dashboards, KPI/KRI metrics, remediation reports, and security exposure trend analyses.
• Support audits, compliance reviews, governance activities, and automation initiatives across the vulnerability management lifecycle.

Skills

Vulnerability Management

Security Operations

Stakeholder Management

Security Reporting

Scripting/Automation

Tools

Tenable.io

Tenable.sc

Qualys VMDR

Rapid7 InsightVM

ServiceNow Vulnerability Response

Wiz

Prisma Cloud

Microsoft Defender Vulnerability Management

Job description

Cognizant is seeking a Vulnerability Management Engineer to support enterprise vulnerability assessment, remediation coordination, and security tooling administration across infrastructure, cloud, and application domains.

The role requires hands-on experience in vulnerability management, risk-based prioritization, and strong stakeholder communication, with opportunities to influence security posture through dashboards and metrics.