Vulnerability Management Engineer

Job Summary

To enhance the organization's security posture, the full-time remote Vulnerability Management Engineer will identify, assess, and mitigate risks across infrastructure, cloud, and application environments while managing the application security program and collaborating with engineering teams.

Key responsibilities

• Drive continuous improvements in vulnerability management processes and tools using automation and data-driven insights
• Perform technical threat/risk assessments and manage vulnerabilities throughout their lifecycle
• Partner with development and DevOps teams to embed security into the software development lifecycle (SDLC) and define application risk prioritization

Required qualifications

• 3-5+ years of experience in cybersecurity, application security, or vulnerability management
• Strong understanding of secure application development and hands-on experience with application security testing methodologies
• Expertise in vulnerability management programs and experience with vulnerability scanning and reporting tools
• Familiarity with industry security frameworks and standards (e.g., NIST CSF/800-53, ISO 27001, OWASP)
• Prior experience working closely with software engineering or DevOps teams is strongly preferred