Security Engineer - Vulnerability Management

Job Summary

To enhance the organization's security posture, the full-time fully remote Security Engineer - Vulnerability Management Specialist will manage and improve the vulnerability management program, focusing on identifying, assessing, and mitigating security vulnerabilities across systems, networks, and applications.

Key Responsibilities

• Identify and mitigate critical vulnerabilities in complex environments using advanced skills in vulnerability exploitation and proof of concept (PoC) development
• Collaborate with IT, security, and development teams to implement best practices and ensure compliance with industry standards
• Contribute to the continuous improvement of vulnerability management processes, tools, and reporting mechanisms

Required Qualifications

• Minimum of 4-6 years of experience in vulnerability management or a related information security role
• Expertise in cloud security tools and platforms such as AWS Inspector, Azure Security Center, or GCP Security Command Center
• Experience with SIEM tools like Splunk or QRadar and integration with vulnerability management processes
• Advanced certifications such as GIAC Certified Vulnerability Analyst (GCVA), Offensive Security Certified Professional (OSCP), or Certified Information Systems Security Professional (CISSP)
• Familiarity with configuration assessment tools such as SCAP or CIS-CAT