Vulnerability Risk Engineer II: Cloud & On-Prem Security

AmTrust Financial Services Inc.; Cleveland (OH); In loco; USD 90.000 - 125.000; Tempo pieno

Vantaggi offerti da questo lavoro

Medical & Dental Plans

Life Insurance

401k Savings Plans

Paid Time Off

Descrizione del lavoro

The Security Engineer II at AmTrust Financial Services Inc. in Cleveland joins the Threat & Vulnerability Management team to reduce enterprise risk by identifying, prioritizing, and remediating vulnerabilities across IT environments.

You will analyze findings, apply risk-based decisions, and collaborate with application, infrastructure, cloud, DevOps, and risk teams to drive verified closure and governance through metrics and reporting.

Competenze

• Bachelor's degree or equivalent professional experience in a relevant field.
• 3+ years managing enterprise vulnerability management programs across on-prem, cloud, and hybrid environments.
• Hands-on experience with vulnerability management platforms such as Tenable, Qualys, Rapid7, and Microsoft Defender VM.

Mansioni

• Own and evolve the enterprise Vulnerability Management Program across the IT environment.
• Manage the end-to-end vulnerability lifecycle, including discovery, validation, risk prioritization, remediation tracking, exception management, verification, and reporting.
• Analyze threat actors, campaigns, industry trends, and emerging cyber risks to provide strategic threat intelligence that informs vulnerability prioritization, exposure management, and broader security and business decisions.
• Operate and optimize vulnerability assessment technologies to maintain comprehensive asset coverage, accurate findings, and actionable risk visibility.
• Correlate and prioritize findings across vulnerability management security platforms, attack surface management solutions, and threat intelligence sources.
• Apply risk‑based prioritization methodologies incorporating CVSS, CISA Known Exploited Vulnerabilities (KEV), exploitability, asset criticality, exposure, and business impact to identify and address the most significant risks.
• Partner with asset management and technology teams to improve asset inventory accuracy, security coverage, ownership attribution, and enterprise risk visibility.
• Design, develop, and maintain security automation capabilities that streamline vulnerability management and related security operations processes, improving efficiency, consistency, data quality, and remediation outcomes while maintaining appropriate governance and oversight.
• Build and enhance integrations, workflows, and tooling across security platforms to automate repetitive tasks, improve visibility and reporting, and enable scalable, end-to-end security operations.

Conoscenze

Risk-based decision making

Threat intelligence analysis

Security automation

Cross-functional collaboration

Vulnerability management

Formazione

Bachelor's degree in Computer Science, Information Technology, Computer Engineering, Cybersecurity, or related field

Strumenti

Tenable

Qualys

Rapid7

Microsoft Defender VM

Azure

AWS

GCP

Descrizione del lavoro

The Security Engineer II at AmTrust Financial Services Inc. in Cleveland joins the Threat & Vulnerability Management team to reduce enterprise risk by identifying, prioritizing, and remediating vulnerabilities across IT environments.

You will analyze findings, apply risk-based decisions, and collaborate with application, infrastructure, cloud, DevOps, and risk teams to drive verified closure and governance through metrics and reporting.