Remote Vulnerability Engineer

Job Description

The Vulnerability Management Engineer will manage and improve vulnerability scanning, identify and prioritize security risks, and coordinate remediation across IT, Security, and business teams.

Key Responsibilities

Manage vulnerability scanning and asset discovery platforms, including scan policies, schedules, authenticated scans, agents, credentials, and integrations. Maintain scan coverage across endpoints, servers, networks, cloud environments, applications, and external assets. Review and prioritize vulnerabilities based on exploitability, threat activity, asset criticality, and business risk. Partner with IT and system owners to remediate findings, track overdue items, and escalate critical risks. Validate remediation through rescanning and other supporting evidence. Troubleshoot vulnerabilities and provide hands-on remediation support when needed. Support vulnerability exceptions by documenting risks, controls, approvals, and expiration dates. Report on vulnerability trends, coverage, aging, remediation status, and overall exposure. Support urgent vulnerability response and improve vulnerability management workflows and automation.

Skills and Requirements

• 3+ years of relevant experience in vulnerability management, security engineering, infrastructure security, or IT operations, with hands-on responsibility for scanning and remediation coordination.

• Experience configuring and operating enterprise vulnerability scanning and asset discovery tools, including authenticated scan setup, credentials, policies, schedules, scanners or agents, and troubleshooting.

• Experience maintaining asset or scan coverage across a mixed environment that includes endpoints, servers, network, cloud, and applications.

• Strong understanding of common vulnerabilities, CVEs and CVSS, patch and configuration remediation, and risk-based prioritization beyond severity scores alone.

• Working knowledge of Windows and Linux systems, networking, cloud services, and how vulnerabilities are discovered and remediated across them.

• Experience using ticketing, asset inventory, or reporting workflows to coordinate owners, track remediation, manage due dates, and verify closure.

• Ability to communicate technical risk clearly to engineers, system owners, end users, and business stakeholders, and to influence work across teams without direct authority.

• Comfort using spreadsheets or dashboards to analyze trends and prepare accurate, audience-appropriate exposure reports.

• A relevant degree or equivalent practical experience.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].