Senior Vulnerability Management Engineer

This is a fully remote position, open to applicants in Maine, +4 more states.

📋 Description

• Join a team of cybersecurity experts dedicated to safeguarding Solventum's healthcare information systems as well as the personal health information of our clients and their patients.

• Lead and manage enterprise vulnerability management platforms (e.g., Qualys, Tenable, or similar).

• Ensure comprehensive, accurate, and scalable scanning coverage across on-premises and various cloud environments.

• Maintain precise asset coverage, scanning integrity, and prioritize vulnerabilities based on risk.

• Analyze findings, confirm exploitability, and provide clear, actionable remediation guidance to engineering teams.

• Drive ongoing enhancements of vulnerability SLAs, metrics, and reporting processes.

• Collaborate with application, platform, and cloud teams to ensure systems comply with security and compliance standards (e.g., NIST 800‑53, FedRAMP, StateRAMP, SOC, HIPAA).

• Design and implement automation and integrations to enhance vulnerability intake, tracking, reporting, and operational efficiency.

• Develop and maintain documentation, runbooks, and operational procedures to boost consistency, resiliency, and cross-team collaboration.

• Provide technical leadership and mentorship to junior engineers, contributing to the reduction of single-point dependencies across security tools and workflows.

• Generate executive-level reports and metrics that effectively communicate risk posture, trends, and remediation progress to leadership.

• Mentor junior engineers and assist in minimizing single points of failure across security tools and processes.

⛳️ Requirements

• Bachelor’s Degree or higher with 7+ years of experience in vulnerability management.

• Proven experience in administering vulnerability management platforms (Qualys, Tenable, or equivalent).

• Experienced in a leadership role, collaborating across multiple teams and disciplines.

• Knowledgeable in AWS or Azure cloud environments.

• Familiar with best practice software security requirements in industry-standard compliance programs (NIST, HITRUST, FedRAMP, etc.).

• Ability to obtain and maintain a Public Trust clearance.

• Strong communication skills, capable of working independently or in collaboration with application teams.

🏝️ Benefits

• Medical

• Dental & Vision

• Health Savings Accounts

• Health Care & Dependent Care Flexible Spending Accounts

• Disability Benefits

• Life Insurance

• Voluntary Benefits

• Paid Absences

• Retirement Benefits