Vulnerability Management Engineer

Job Summary

To support a large federal client, the full-time remote Vulnerability Management Engineer will own and operate vulnerability management programs, leading scanning operations, managing attack surface reduction initiatives, and driving remediation efforts to closure.

Key responsibilities

• Lead and manage end-to-end vulnerability disclosure programs and attack surface management initiatives
• Operate and maintain enterprise vulnerability scanning platforms, executing and reporting on scans across complex environments
• Track and drive remediation of vulnerabilities while maintaining accurate program documentation and stakeholder engagement

Required qualifications

• 3+ years of hands-on vulnerability management experience
• Demonstrated program ownership in vulnerability disclosure or attack surface management
• Proficiency with Tenable.sc and/or Tenable.io for scanning and reporting
• Experience with CISA programs or equivalent federal cybersecurity initiatives
• Active security clearance or eligibility to obtain one preferred