> Markdown version of [/jobs/ext/4720987-information-security-engineer](https://www.wearedevelopers.com/jobs/ext/4720987-information-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Engineer - **Company:** Macom (nasdaq: Mtsi) - **Location:** Hamilton Township, NJ, United States - **Experience:** Starter - **Salary:** $64,000 - $113,000 - **Contract:** Internship / Graduate position - **Skills:** Application Programming Interfaces (APIs), Amazon Web Services, Apple Mac Systems, JIRA, Microsoft Azure, Spreadsheets, CompTIA Security+, Cyber Security, Linux, Domain Name System (DNS), Issue Tracking Systems, Python (Programming Language), Networking Basics, Windows PowerShell, Runbook, Data Streaming, Software Vulnerability Management, Windows Desktop, Scripting, Google Cloud, Cloud Platform System, Firewalls (Computer Science), Qualys, Servicenow - **Published:** November 14, 2026 - **Apply:** https://www.dice.com/job-detail/d093ce92-f33d-40e3-b826-bddb875f8db6 ## About the Role 1-3 years of experience in IT, security operations, systems administration, help desk, or a related role (internships, labs, and homelab work count). A working understanding of vulnerabilities and common terms like CVE, CVSS, patching, and misconfiguration. Familiarity with Windows, macOS, and Linux at a basic administration level. Basic networking knowledge, such as ports, protocols, DNS, and firewalls. Comfort with spreadsheets and dashboards for filtering, sorting, and summarizing data. Clear written and verbal communication, and the confidence to follow up with teams on deadlines. Strong organization and attention to detail when tracking many open items at once. Nice to have Hands-on experience with CrowdStrike Falcon, especially Exposure Management (formerly Spotlight), or similar tools like Tenable, Qualys, or Rapid7. An entry-level certification such as CompTIA Security+, Network+, or a CrowdStrike Falcon certification. Exposure to risk-based prioritization frameworks such as EPSS, CISA KEV, or SSVC. Basic scripting in Python or PowerShell, or experience with APIs, to automate reports or data pulls. Experience with ticketing systems such as Jira or ServiceNow. Familiarity with cloud environments (AWS, Azure, or Google Cloud Platform). What success looks like First 90 days: You know our environment and the Falcon Exposure Management console well enough to answer most day-to-day questions on your own. You've reviewed asset coverage, cleaned up tagging and asset groups, and started running vulnerability reviews with at least a few teams. ## Description We're hiring a Vulnerability Management Analyst to own our CrowdStrike Falcon Exposure Management platform and help engineering and IT teams fix what matters most first. This is an early-career role on the MACOM Information Security Team, reporting to the Manager of Vulnerability Response & BCDR. You'll keep our exposure data accurate and complete, then turn it into clear, prioritized work for the teams who own the assets. Half the job is the platform; the other half is partnering with people. You don't need to have done this exact job before, but you should be curious about how attackers find weaknesses and motivated to help others close them. What you'll do CrowdStrike Exposure Management administration Configure and maintain CrowdStrike Falcon Exposure Management, including asset groups, tags, filters, dashboards, and saved views. Monitor sensor and asset coverage, identify unmanaged or missing assets, and work with IT to close coverage gaps. Tune prioritization settings (such as ExPRT.AI ratings, asset criticality, and internet exposure) so risk scores reflect our environment. Maintain integrations and data flows between Falcon and other tools, such as ticketing (e.g., Jira / ServiceNow) and reporting. Keep platform documentation, runbooks, and user access up to date, and stay current on new Falcon features and release notes. Vulnerability review and prioritization Run recurring vulnerability reviews with engineering, infrastructure, and IT teams to walk through their open findings. Help teams decide what to fix first based on exploitability, asset criticality, exposure, and business context, not just CVSS score. Track remediation against our SLAs, follow up on overdue items, and escalate when needed. Validate fixes, investigate false positives, and help document and track risk exceptions. Watch for newly disclosed, actively exploited vulnerabilities (e.g., CISA KEV) and help teams respond quickly. Reporting Produce regular metrics on open vulnerabilities, remediation trends, SLA performance, and coverage. Translate technical findings into clear summaries for both engineers and leadership.