IT Security Engineer

About the Role

We are looking for a Vulnerability Management & Security Engineer to help strengthen our enterprise cybersecurity program. In this role, you will operate and improve vulnerability management capabilities, analyze security risk, coordinate remediation with technical teams, and help reduce exposure across a complex global technology environment.

This is a hands-on technical role with strong cross-functional visibility. You will work closely with Infrastructure, End User Services, Cloud Operations, application teams, and Security Operations to identify, prioritize, communicate, and validate remediation of vulnerabilities that matter most to the business.

What You'll Do

• Operate, administer, and continuously improve enterprise vulnerability management platforms, including Tenable and related technologies.
• Define and maintain vulnerability scanning strategies across servers, workstations, network devices, cloud resources, web applications, and externally exposed assets.
• Analyze vulnerability findings and prioritize remediation using exploitability, threat intelligence, asset criticality, business impact, and risk context.
• Partner with technical teams to drive remediation of critical and high-risk vulnerabilities through verified closure.
• Improve scan coverage, authenticated assessment rates, asset visibility, vulnerability discovery accuracy, and reporting quality.
• Develop dashboards, metrics, and reports that show vulnerability aging, SLA performance, asset coverage, exposure trends, remediation progress, and risk reduction.
• Support exception reviews, compensating-control analysis, escalation activities, and evidence collection for audit-ready vulnerability management practices.
• Contribute to broader cybersecurity engineering initiatives, including endpoint security, identity security, cloud security, Zero Trust, security hardening, threat hunting, and exposure reduction.

What We're Looking For

• Bachelor's degree in cybersecurity, information technology, computer science, or equivalent practical experience.
• 5+ years of cybersecurity, infrastructure, or security engineering experience.
• 3+ years of experience managing or supporting enterprise vulnerability management programs.
• Hands-on experience with Tenable or equivalent vulnerability assessment platforms.
• Experience supporting vulnerability remediation across large, decentralized, or complex technology environments.
• Strong working knowledge of vulnerability scoring, risk-based prioritization, CVSS, CIS Benchmarks, NIST guidance, and industry vulnerability management practices.
• Ability to translate technical security findings into clear remediation guidance and practical business risk context.
• Strong communication, stakeholder engagement, analytical, and problem-solving skills.

Preferred Qualifications

• Cybersecurity certification such as CISSP, GIAC, CySA+, Security+, CVA, or similar.
• Experience in healthcare, medical device, manufacturing, or other regulated environments.
• Experience with vulnerability management platforms, security operations technologies, IT service management or CMDB platforms, cloud security technologies, scripting, APIs, or Infrastructure-as-Code.
• Experience developing dashboards, operational metrics, executive-ready reporting, or audit evidence for cybersecurity programs.

What Success Looks Like in the First 12 Months

• Improve vulnerability scan coverage and reliability across key enterprise asset populations.
• Strengthen risk-based prioritization and remediation tracking for critical and high-risk vulnerabilities.
• Deliver clear reporting that helps technical teams and leadership understand exposure, aging, remediation progress, and risk reduction.
• Build strong working relationships with Security, Infrastructure, Cloud Operations, End User Services, application teams, and other remediation partners.
• Identify opportunities to automate repetitive vulnerability management workflows and improve operational efficiency.