Infrastructure Security Vulnerability Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee and orchestrate vulnerability remediation efforts across both infrastructure and applications.

• Assess vulnerabilities utilizing CVE, CVSS, exploitability metrics, threat intelligence, asset importance, attack vectors, and exposure data.

• Assist in remediation efforts in accordance with CISA BOD 26-04 and other federal cybersecurity regulations.

• Facilitate vulnerability assessment and remediation in environments such as Windows Server 2019+, Linux/RHEL 9.x+, and various application settings.

• Employ Tenable Security Center, Nessus, and Qualys to analyze findings, confirm remediation efforts, and pinpoint remaining exposures.

• Collaborate with application owners, managers, infrastructure teams, vendor managers, and risk management partners.

• Keep vulnerability records updated in ServiceNow or other tracking systems.

• Organize patching and remediation initiatives through established change management protocols.

• Assist in managing vulnerability exceptions, making risk-based remediation choices, responding to incidents, and escalating overdue vulnerabilities.

• Utilize cloud-based AI tools for identifying vulnerabilities, analyzing data, prioritizing issues, and streamlining remediation processes.

• Create metrics and reports for vulnerability management that encompass remediation progress, aging vulnerabilities, overdue findings, and risk trends.

• Enhance procedures for vulnerability management, remediation workflows, reporting precision, and operational efficiency.

• Record findings, remediation efforts, exceptions, and related processes.

⛳️ Requirements

• US Citizenship is required.

• 3–5+ years of experience in vulnerability management, vulnerability remediation, patch management, or a closely related role in infrastructure security.

• Practical experience with Tenable Security Center, Nessus, and Qualys.

• Proficient understanding of Windows Server 2019 and later, including vulnerability remediation, security patching, and system configurations.

• Experience with Linux environments, especially Red Hat Enterprise Linux (RHEL) 9.x and later, focusing on security updates, patching, and vulnerability remediation.

• Knowledge of CVE and CVSS analysis, vulnerability prioritization, exploitability, threat intelligence, asset criticality, and exposure-based remediation methods.

• Background in coordinating vulnerability remediation and patch management efforts, tracking findings to resolution, and collaborating with technical teams to address unresolved security issues.

• Familiarity with change management processes.

• Experience using ServiceNow or similar ticketing systems.

• Strong skills in Microsoft Excel and reporting.

• Excellent written and verbal communication abilities.

• Strong analytical, organizational, and troubleshooting capabilities.

• Capacity to operate within a regulated cloud environment and adhere to established security, compliance, documentation, and risk management protocols.

• Must be a US citizen.

• 5–6 years of experience along with a Bachelor's degree or equivalent, or 4 years of experience with a Master's degree or equivalent.

• Candidates must be authorized to work in the United States without the need for visa sponsorship, now or in the future.

• Relevant cybersecurity, vulnerability management, infrastructure security, or cloud security certifications are preferred.

• Familiarity with FedRAMP, NIST SP 800-53, DISA STIGs, and federal cybersecurity compliance standards is advantageous.

• Experience with CISA Known Exploited Vulnerabilities information and other threat intelligence sources is beneficial.

• Background in supporting US federal government, DoD, or other regulated enterprise environments is a plus.

• Experience with PowerShell, Bash, or Python is a plus.

• Familiarity with ManageEngine Endpoint Central or similar platforms is a plus.

• Experience with VMware and Active Directory is also a plus.

• Experience in identifying and coordinating the remediation of application vulnerabilities is a plus.

• Familiarity with cloud security technologies and AI-assisted tools is an advantage.

🏝️ Benefits

• Comprehensive benefits package.

• Competitive salary plus potential bonuses.