Vulnerability Management Engineer

What you'll do

• Perform vulnerability assessments and manage the full vulnerability management lifecycle for complex infrastructure.
• Prioritize security vulnerabilities based on business impact, technical risk, threat modeling, and CVSS scoring.
• Partner with engineering teams to identify, address, and remediate critical security risks and fixes.
• Apply configuration compliance standards like CIS Benchmarks and DISA STIGs to harden cloud and on-premise environments.
• Navigate audits and compliance requirements to ensure the platform meets regulatory standards like PCI DSS and FedRAMP.
• Secure containerized environments and orchestration platforms, specifically focusing on Docker and Kubernetes.
• Use Splunk and SPL to query security data and build automated reporting dashboards for vulnerability tracking.
• Integrate security scanning tools into CI/CD pipelines and audit Infrastructure as Code for configuration errors.

What we're looking for

• Must be a U.S. Person (U.S. citizen, U.S. national, lawful permanent resident, asylee, or refugee).
• 3+ years of experience in the vulnerability management lifecycle, including assessment, prioritization, and hands-on remediation.
• Proven experience applying configuration compliance standards like CIS Benchmarks or DISA STIGs to harden infrastructure and cloud environments.
• Demonstrated experience using threat modeling and CVSS scoring to prioritize vulnerabilities based on business impact and technical risk.
• Experience securing containerized environments and orchestration platforms, specifically Docker and Kubernetes.
• Technical experience with cloud operational models and security requirements of SaaS architectures built on microservices.
• Experience using Splunk and SPL to query security data and build automated reporting dashboards (preferred).
• Experience integrating security scanning in CI/CD pipelines and auditing Infrastructure as Code (preferred).