Vulnerability Management Systems Engineer

Federal Home Loan Bank Pittsburgh; Pittsburgh (Allegheny County); On-site; USD 90,000 - 120,000; Full time

Job summary

Federal Home Loan Bank of Pittsburgh is seeking a Vulnerability Management Systems Engineer to strengthen security by evaluating and remediating vulnerabilities across on-premises and cloud environments. The role emphasizes collaboration with IT teams, automation, and continuous improvement of remediation processes.

The position focuses on lifecycle activities from discovery to reporting, including developing repeatable validation methods and leveraging AI-enabled tooling to enhance threat

Qualifications

• Bachelor of Science degree in Information Systems or equivalent.
• Five years experience in technical support role, including three years as Windows system administrator.
• Experience with networks, operating systems, monitoring, security and infrastructure; certification preferred.
• Strong analytical and problem-solving abilities.
• Excellent communication and presentation skills; able to work in a team and manage multiple projects.

Responsibilities

• Analyze identified vulnerabilities to determine impact and remediation actions.
• Collaborate with infrastructure and application teams to coordinate remediation activities with tested and validated changes.
• Develop frameworks and workflows for consistent remediation across servers, apps, and cloud environments.
• Automate assessment and remediation routines to improve efficiency.
• Monitor systems during remediation to ensure stability and patch implementation.

Skills

Analytical thinking

Communication skills

Team collaboration

Problem solving

Multi-tasking

Creative thinking

Education

Bachelor of Science in Information Systems

Tools

Terraform

CI/CD

AI-driven tooling

Job description

Position Summary

The Vulnerability Management Systems Engineer strengthens the organization\'s security posture by evaluating and remediating system, application, and infrastructure vulnerabilities across onpremises and cloud environments. The role combines technical analysis, handson engineering, risk evaluation, and crossteam collaboration to support secure operational practices. It spans the full vulnerability management lifecycle-discovery, assessment, remediation, and reporting-while guiding remediation strategies, creating repeatable validation processes, improving automation, and monitoring system behavior to ensure stability and resilience against evolving threats.

Primary Success Factors

• Analyze identified vulnerabilities to determine potential impact and required remediation actions.
• Collaborate with infrastructure and application teams to coordinate remediation activities, ensuring changes are tested and validated thoroughly.
• Develop frameworks and workflows that guide consistent vulnerability remediation practices across servers, applications, and cloud environments.
• Assist in automating assessment and remediation routines where possible, improving efficiency and reliability.
• Monitor systems during remediation efforts to confirm stability, performance, and successful implementation of patches or configuration changes.
• Maintain awareness of emerging threats, industry trends, and evolving attacker tactics; recommend updates to remediation approaches accordingly.
• Contribute to secure configuration baselines and support the engineering of hardened templates for virtual, physical, and cloud systems.
• Support operational excellence by troubleshooting system issues related to remediation, performance, or availability.
• Generate clear reporting and visibility into vulnerability trends, remediation progress, and risk reduction activities.
• Ensure alignment with organizational policies, regulatory expectations, and security best practices.
• Monitor AI-enabled systems for performance and reliability during remediation and adjust strategies based on real-time insights and predictive analytics.
• Collaborate with technical teams to integrate AI solutions into existing processes, ensuring continuous improvement and adaptation to evolving threat landscapes.
• Develop and refine automated workflows for provisioning, updating, and hardening virtual machines and cloud resources, leveraging Terraform modules and best practices.
• Continuously improve image templates and deployment pipelines to align with organizational standards and evolving security requirements.

Required Experience

• Bachelor ofSciencedegree in Information Systems or equivalent work experience
• Fiveyearsofexperience in technical support role,includingthreeyears of experience as a system administrator for Windows
• Demonstrated networks, operating systems, system monitoring,securityand technology infrastructureexperience; specializingin one or more technical areas where a thorough and detailed understanding of the environment isrequired,andcertification in areas of specialization is preferred
• Demonstrated analytical skills with creative innovative approaches to problem-solving
• Strong communicationand presentation skills,ability to function as a member of a teamandability to manage multiple projects and tasks concurrently
• Knowledge of sound, industry-accepted server software supportpracticesand methodologies
• Experience with vulnerability analysis, patch assessment and vulnerability scoring tools
• Knowledge of vulnerability scoring systems (CVSS Scores)
• Proven analytical and troubleshooting abilities across performance, availability, and security scenarios.
• Effective communicator able to collaborate across technical teams and manage multiple priorities in a fast-moving environment.
• Experience with modern automation and engineering practices (Terraform, CI/CD, AI-driven tooling preferred).

It is the policy of the Federal Home Loan Bank of Pittsburgh to ensure equal employment opportunity (EEO) for all employees and applicants for employment without regard to race, religion, color, sex, national origin, age, disability status, genetic information, veteran\'s status, ancestry, sexual orientation or status as a parent as defined by applicable law. It is the Bank\'s policy to comply with applicable laws concerning the employment of persons with disabilities, including reasonable accommodation for applicants and employees with disabilities.