Vulnerability Management Engineer

Job Summary

To establish a robust vulnerability management program, the contract Vulnerability Management Engineer will work remotely for 12-14 weeks, focusing on reconciling asset inventories, assessing current vulnerability postures, and building a ServiceNow remediation workflow.

Key responsibilities

• Reconcile asset data across various platforms and identify coverage gaps
• Baseline current vulnerability posture and produce a risk-ranked register
• Build and configure the ServiceNow remediation workflow, defining SLAs and driving initial remediation efforts

Required qualifications

• Hands-on experience with Tenable and CrowdStrike vulnerability tools
• Proven ability to prioritize risks using CVSS, EPSS, and CISA KEV
• Experience in building ServiceNow Vulnerability Response workflows
• Familiarity with remediation orchestration across infrastructure and application owners
• Proficiency in applying AI models like ChatGPT Enterprise to security workflows