Remote Vulnerability Engineer

The Vulnerability Management Engineer will manage and improve vulnerability scanning, identify and prioritize security risks, and coordinate remediation across IT, Security, and business teams., Manage vulnerability scanning and asset discovery platforms, including scan policies, schedules, authenticated scans, agents, credentials, and integrations. Maintain scan coverage across endpoints, servers, networks, cloud environments, applications, and external assets. Review and prioritize vulnerabilities based on exploitability, threat activity, asset criticality, and business risk. Partner with IT and system owners to remediate findings, track overdue items, and escalate critical risks. Validate remediation through rescanning and other supporting evidence. Troubleshoot vulnerabilities and provide hands-on remediation support when needed. Support vulnerability exceptions by documenting risks, controls, approvals, and expiration dates. Report on vulnerability trends, coverage, aging, remediation status, and overall exposure. Support urgent vulnerability response and improve vulnerability management workflows and automation.

• 3+ years of relevant experience in vulnerability management, security engineering, infrastructure security, or IT operations, with hands-on responsibility for scanning and remediation coordination.
• Experience configuring and operating enterprise vulnerability scanning and asset discovery tools, including authenticated scan setup, credentials, policies, schedules, scanners or agents, and troubleshooting.
• Experience maintaining asset or scan coverage across a mixed environment that includes endpoints, servers, network, cloud, and applications.
• Strong understanding of common vulnerabilities, CVEs and CVSS, patch and configuration remediation, and risk-based prioritization beyond severity scores alone.
• Working knowledge of Windows and Linux systems, networking, cloud services, and how vulnerabilities are discovered and remediated across them.
• Experience using ticketing, asset inventory, or reporting workflows to coordinate owners, track remediation, manage due dates, and verify closure.
• Ability to communicate technical risk clearly to engineers, system owners, end users, and business stakeholders, and to influence work across teams without direct authority.
• Comfort using spreadsheets or dashboards to analyze trends and prepare accurate, audience-appropriate exposure reports.
• A relevant degree or equivalent practical experience.