Infrastructure Vulnerability Engineer

· Core responsibilities to include assessing and promoting remediation for all the assets that reside in all the regions and data centers across the globe.

· Candidate will be a key member of the centralized information security team.

What you’ll do:

· Run authenticated and agent-based vulnerability scans across on-prem, cloud, and container environments, and report findings.

· Publish vulnerability status reports and dashboards to senior management and track remediation against defined SLAs.

· Define and participate in implementation of On-prem and Cloud architecture and security controls.

· Proactively identify emerging threats and actively exploited vulnerabilities, and prioritize remediation using risk context (CVSS, EPSS, CISA KEV, asset criticality).

· Partner with infrastructure, cloud, and application teams to drive remediation, validate fixes, and manage risk exceptions.

· Maintain security by monitoring and ensuring compliance to standards, policies, and procedures; conducting incident response analyses; developing and conducting training programs.

· Identify gaps in scan coverage and asset inventory, and recommend tooling and process improvements, including automation.

· Participate in and assist with incident response team, as appropriate.

· Generate metrics (e.g., mean time to remediate, SLA compliance, risk trends) for management as needed.

· Prepare system security reports by collecting, analyzing, and summarizing data and trends.

· 3-5 years of experience in information security, vulnerability management, or penetration testing; a relevant master’s degree may substitute for up to two years of experience.

· Experience in vulnerability and threat management, including gathering and condensing threat intelligence into actionable and meaningful communication materials.

· Bachelor’s degree in information security, information technology, computer science, or a related STEM field, or equivalent practical experience.

· Working knowledge of network security architecture, segmentation, and secure configuration.

· Solid understanding of network, system, and endpoint security.

· Experience with public cloud platforms (AWS, Microsoft Azure, Google Cloud) and cloud security tooling such as CSPM/CNAPP (e.g., Wiz, Prisma Cloud, Microsoft Defender for Cloud).

· Familiarity with security frameworks and regulatory requirements such as NIST CSF 2.0, CIS Controls, ISO 27001/27002, and SOC 2 (SSAE 18).

· Hands-on experience with modern vulnerability management platforms

· Practical experience with the development, implementation, and management of security related technologies (e.g., SIEM, EDR, WAF, next-generation firewalls, internet-facing services).

· Excellent customer service including strong written and oral communication skills.

· Familiarity with container and Kubernetes security, infrastructure as code (e.g., Terraform), and scripting (Python or PowerShell) to automate scanning, ticketing, and reporting.

· Demonstrated understanding of information security concepts, standards, practices, including but not limited to firewalls, intrusion prevention and detection, TCP/IP and related protocols, device monitoring and log management and event monitoring/reporting.

· Certifications such as CompTIA Security+ or CySA+, GIAC (e.g., GCIH, GPEN), OSCP, or a cloud security certification (e.g., AWS Certified Security - Specialty, Microsoft AZ-500) are a plus.

· Results-focused, with strong attention to detail.

Ability to work a second shift that overlaps with customer hours