Vulnerability Management Engineer

What you'll do

• Manage the full vulnerability management lifecycle including assessment, prioritization, and hands-on remediation across complex infrastructure.
• Apply configuration compliance standards like CIS Benchmarks and DISA STIGs to harden cloud and on-premise environments.
• Prioritize security vulnerabilities based on threat modeling, CVSS scoring, and potential business impact.
• Secure containerized environments and orchestration platforms including Docker and Kubernetes.
• Partner with engineering teams to identify risks and ensure critical security fixes are implemented.
• Navigate audits and compliance requirements to ensure the infrastructure meets regulatory standards like PCI DSS and FedRAMP.
• Use Splunk and SPL to query security data, visualize results, and build automated reporting dashboards.
• Integrate security scanning tools into CI/CD pipelines and audit Infrastructure as Code (IaC) for configuration errors.

What we're looking for

• Must be a U.S. Person (citizen, national, permanent resident, asylee, or refugee).
• 3+ years of experience in the vulnerability management lifecycle including assessment, prioritization, and remediation.
• Experience applying configuration compliance standards like CIS Benchmarks or DISA STIGs to harden infrastructure.
• Experience using threat modeling and CVSS scoring to prioritize vulnerabilities based on risk.
• Experience securing containerized environments and orchestration platforms such as Docker and Kubernetes.
• Technical experience with cloud operational models and security requirements of SaaS architectures built on microservices.
• Proficiency in Splunk and Search Processing Language (SPL) to query data and build dashboards (preferred).
• U.S. citizen, U.S. national, lawful permanent resident, asylee, or refugee.