Lead Vulnerability Management Engineer

What you'll do

• Serve as the technical authority and mentor for the Vulnerability Management team's architecture and systems design.
• Lead the evaluation, integration, and architectural design of security tools across global infrastructure and cloud environments.
• Conduct advanced vulnerability scanning and perform in-depth validation to triage and prioritize critical risks.
• Develop AI-driven solutions to automate the vulnerability lifecycle and eliminate repetitive operational tasks.
• Manage the remediation backlog by tracking risk reduction progress and reporting on systemic security trends.
• Translate complex technical vulnerabilities into clear compliance context for GRC teams and audit readiness.
• Convert regulatory requirements into actionable technical scanning policies and automated remediation workflows.

What we're looking for

• A Bachelor's degree in Computer Science, Information Security, or related security certifications is required.
• 5+ years of Vulnerability Management experience in a senior or lead technical capacity is required.
• You must have a solid understanding of cloud, enterprise, and government security frameworks including FedRAMP, SOC 2, PCI DSS, and NIST.
• Experience with vulnerability risk scoring methodologies like CVSS and EPSS is required.
• Hands-on experience with vulnerability scanning platforms such as Qualys, Nessens, or Rapid7 InsightVM is required.
• Demonstrated experience using AI to develop and manage complex workflows and applications is required.
• Experience with scripting languages (Python), specific AI tools (Opencode/Windsurf), and infrastructure pentesting tools are preferred.
• Export control laws, including the U.S. Export Administration Regulations.