Vulnerability Scanning & Remediation Engineer I

Avnet

United States

Remote

USD 70,000 - 110,000

Full time

9 days ago

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

Avnet is seeking a Vulnerability Management/ Security Operations-focused engineer to validate scans, monitor appliances, and manage remediation tickets across networks and regions. The role emphasizes dashboards, reporting, and collaboration with asset owners to drive remediation success.

The candidate should have foundational cybersecurity knowledge, basic networking, and experience with ITSM tools, with opportunities for growth into broader security engineering activities in a remote-working

Qualifications

Basic understanding of cybersecurity concepts, vulnerabilities, risk ratings, CVEs, remediation, and patching.
Foundational knowledge of networking concepts such as IP addresses, subnets, ports, protocols, and network connectivity.
Basic familiarity with Windows, Linux, network devices, databases, and cloud or virtualized environments.
Ability to work with dashboards, reports, CSV exports, tickets, and documented operational procedures.
Good written communication skills for ticket updates, stakeholder follow-ups, and evidence documentation.
Attention to detail and ability to validate asset information, vulnerability details, scan results, and exception evidence accurately.
Willingness to learn vulnerability management platforms, IT service management tools, CMDB processes, and enterprise security workflows.

Responsibilities

Validate vulnerability scan schedules and confirm scans are running as planned across assigned networks, subnets, and regions.
Monitor scanner appliance health, scanner assignment, scan configuration, and scan failures, including offline scanners, authentication issues, access issues, and network connectivity problems.
Raise, update, and follow up on incident or remediation tickets related to scanner failures, scan issues, and vulnerability remediation activities.
Support approved ad hoc rescans for eligible assets, validate hostname, IP address, vulnerability details, and confirm whether remediation has successfully resolved the finding.
Update remediation tickets with scan results, CSV reports, evidence, and clear remediation validation notes.
Monitor vulnerability dashboards and extract reports from tools such as ArmorCode and CrowdStrike for findings, statistics, SLA tracking, and evidence collection.
Review exception requests, validate affected assets, justification, evidence, asset owner, risk owner, exception category, and approval status.
Support creation and maintenance of approved exceptions in vulnerability management platforms after required approvals are completed.
Assist in handling vulnerability advisories by validating CVE availability, affected assets, impacted versions, and coordinating remediation follow-up with asset owners.
Review finding reassignment requests, validate ownership evidence, prepare templates, and coordinate with internal stakeholders for reassignment review.
Assist with External Attack Surface Management findings by identifying asset ownership, coordinating remediation, and supporting owner mapping activities.
Support immediate follow-up for critical vulnerabilities that may impact external security ratings or business risk indicators.
As the engineer gains experience, gradually support selected security engineering activities under guidance, including tooling issues and process improvements.