Vulnerability Management Systems Engineer

FHLBank Pittsburgh; Pittsburgh (Allegheny County); On-site; USD 110,000 - 150,000; Full time

Job summary

FHLB Pittsburgh is seeking a Vulnerability Management Systems Engineer to strengthen our security posture across on‑premises and cloud environments. You will analyze vulnerabilities, coordinate remediation with infrastructure and application teams, and help automate assessment and remediation workflows.

The role covers the full vulnerability lifecycle, from discovery to reporting, and requires strong communication, problem solving, and a proactive approach to risk reduction.

Qualifications

• Experience with vulnerability analysis, patch assessment and vulnerability scoring tools.
• Proven ability to guide remediation strategies and validate fixes.
• Strong communication and collaboration across technical teams.
• Experience with modern automation and engineering practices.

Responsibilities

• Analyze identified vulnerabilities to determine impact and remediation actions.
• Collaborate with infrastructure and application teams to coordinate remediation activities.
• Develop workflows for consistent vulnerability remediation across environments.
• Assist in automating assessment and remediation routines.
• Monitor systems during remediation to ensure stability and successful patches.

Skills

Vulnerability analysis

Remediation coordination

Automation engineering

Windows administration

Cross-team collaboration

Communication

Monitoring and troubleshooting

Education

Bachelor of Science in Information Systems or equivalent

Tools

Terraform

CI/CD

AI-driven tooling

Vulnerability scanners

Job description

Position SummaryThe Vulnerability Management Systems Engineer strengthens the organization’s security posture by evaluating and remediating system, application, and infrastructure vulnerabilities across on‑premises and cloud environments. The role combines technical analysis, hands‑on engineering, risk evaluation, and cross‑team collaboration to support secure operational practices. It spans the full vulnerability management lifecycle—discovery, assessment, remediation, and reporting—while guiding remediation strategies, creating repeatable validation processes, improving automation, and monitoring system behavior to ensure stability and resilience against evolving threats.Primary Success FactorsAnalyze identified vulnerabilities to determine potential impact and required remediation actions.Collaborate with infrastructure and application teams to coordinate remediation activities, ensuring changes are tested and validated thoroughly.Develop frameworks and workflows that guide consistent vulnerability remediation practices across servers, applications, and cloud environments.Assist in automating assessment and remediation routines where possible, improving efficiency and reliability.Monitor systems during remediation efforts to confirm stability, performance, and successful implementation of patches or configuration changes.Maintain awareness of emerging threats, industry trends, and evolving attacker tactics; recommend updates to remediation approaches accordingly.Contribute to secure configuration baselines and support the engineering of hardened templates for virtual, physical, and cloud systems.Support operational excellence by troubleshooting system issues related to remediation, performance, or availability.Generate clear reporting and visibility into vulnerability trends, remediation progress, and risk reduction activities.Ensure alignment with organizational policies, regulatory expectations, and security best practices.Monitor AI-enabled systems for performance and reliability during remediation and adjust strategies based on real-time insights and predictive analytics.Collaborate with technical teams to integrate AI solutions into existing processes, ensuring continuous improvement and adaptation to evolving threat landscapes.Develop and refine automated workflows for provisioning, updating, and hardening virtual machines and cloud resources, leveraging Terraform modules and best practices.Continuously improve image templates and deployment pipelines to align with organizational standards and evolving security requirements.Required ExperienceBachelor of Science degree in Information Systems or equivalent work experienceFive years of experience in technical support role, including three years of experience as a system administrator for WindowsDemonstrated networks, operating systems, system monitoring, security and technology infrastructure experience; specializing in one or more technical areas where a thorough and detailed understanding of the environment is required, and certification in areas of specialization is preferredDemonstrated analytical skills with creative innovative approaches to problem-solvingStrong communication and presentation skills, ability to function as a member of a team and ability to manage multiple projects and tasks concurrentlyKnowledge of sound, industry-accepted server software support practices and methodologiesExperience with vulnerability analysis, patch assessment and vulnerability scoring toolsKnowledge of vulnerability scoring systems (CVSS Scores)Proven analytical and troubleshooting abilities across performance, availability, and security scenarios.Effective communicator able to collaborate across technical teams and manage multiple priorities in a fast-moving environment.Experience with modern automation and engineering practices (Terraform, CI/CD, AI-driven tooling preferred).It is the policy of the Federal Home Loan Bank of Pittsburgh to ensure equal employment opportunity (EEO) for all employees and applicants for employment without regard to race, religion, color, sex, national origin, age, disability status, genetic information, veteran's status, ancestry, sexual orientation or status as a parent as defined by applicable law. It is the Bank's policy to comply with applicable laws concerning the employment of persons with disabilities, including reasonable accommodation for applicants and employees with disabilities.