Vulnerability Management Engineer

This is a fully remote position, open to applicants in Iowa.

📋 Description

• Oversee and improve the organization's vulnerability management program

• Supervise both internal and external vulnerability scans while ensuring coverage of relevant assets

• Confirm vulnerability findings to aid in precise remediation efforts

• Evaluate and prioritize vulnerabilities based on their severity, exploitability, asset exposure, and business implications

• Keep track of newly disclosed vulnerabilities, active exploitation, and emerging threats

• Facilitate timely remediation or implement suitable compensating controls

• Coordinate endpoint and server patching in conjunction with asset owners

• Manage third-party application patching utilizing Automox, Intune, Patch My PC Cloud, and scripting techniques

• Validate deployments and oversee testing and change approvals

• Work collaboratively with infrastructure and software engineering teams to designate remediation responsibilities and monitor progress

• Raise awareness of overdue findings and verify remediation through rescanning

• Directly address vulnerabilities using Intune, Active Directory Group Policy, Automox, and PowerShell scripting when necessary

• Report on vulnerability trends, remediation progress, overdue findings, scan coverage, and critical risks to IT leadership

• Continuously enhance the vulnerability management lifecycle and document any exceptions

• Engage in on-call duties, triage and investigate security alerts, respond to incidents, and coordinate escalation and remediation efforts

⛳️ Requirements

• 1-3 years of experience in a comparable infrastructure or security position

• Proficient knowledge of Intune, Automox, Active Directory Group Policy, and PowerShell scripting

• Practical experience with patch management, deployment, and reporting

• Solid understanding of current IT risks and experience in implementing security solutions

• Proven experience in administering and securing Windows Server, Windows 10 and 11, and macOS

• Effective troubleshooting skills with the capability to resolve complex issues

• Strong attention to detail and analytical abilities

• Excellent interpersonal and communication skills

• Capacity to work under pressure and meet tight deadlines

• Relevant certifications such as CompTIA Security+, CompTIA Network+, or Microsoft 365 Certified: Endpoint Administrator Associate (MD-102) are preferred but not mandatory

• Familiarity with software development lifecycles and application vulnerability remediation

• Experience in validating vulnerability findings, confirming remediation, or integrating vulnerability management with patching and ticketing workflows

• Incident response experience, or a willingness to learn and develop these skills through training and practical involvement

• Experience utilizing artificial intelligence to assist in technical tasks

• Exposure to cloud security

• Must not require immigration sponsorship now or in the future to work in the United States

🏝️ Benefits

• PTO, holiday pay, and a holiday of choice

• 401(k) matching

• Life insurance

• Short-term disability coverage

• Health, dental, and vision insurance

• Maternity/paternity leave

• Health savings account (HSA)

• Flexible spending accounts (FSA) for health and dependents

• Company-paid travel to headquarters for new hire orientation, training, and onboarding