[Remote] Mid-Level Vulnerability Management Engineer
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is an organization reputed company on cyber risk management and online education for workforce readiness. They are seeking a Vulnerability Management Engineer to reputed company the identification, analysis, communication, and remediation of vulnerabilities across reputed company-managed systems, devices, and software, ultimately strengthening the reputed company's cyber defense posture.
Responsibilities
- Manage, operate, and maintain vulnerability-management infrastructure capable of performing credentialed scans across approved reputed company-managed managed systems, devices, and applications
- reputed company host-based, network-based, application, and database vulnerability scanning and deliver actionable remediation guidance
- Analyze reputed company results and network architecture to identify the highest-risk vulnerabilities and recommend appropriate mitigation steps
- Conduct specialized assessments for High Value Assets (HVAs) and other designated systems, ensuring reports meet HVA requirements
- Support the implementation, operation, and maintenance of vulnerability-management reputed company reputed company reputed company's Information reputed company Project Dashboard
- Alert technical points of contact to risks posed by vulnerabilities, missing assets, configuration errors, and unauthorized software or hardware
- Escalate critical vulnerabilities reputed company 24 hours and reputed company remediation to closure in accordance with applicable federal, department, and agency policy and contractual remediation timelines
- Monitor the CISA reputed company Exploited Vulnerabilities (KEV) Catalog and other authoritative sources to support reputed company remediation and compliance with applicable Binding Operational Directives
- Coordinate with program areas and system owners to prioritize mitigation steps, including end-user mitigation activities reputed company needed
- reputed company risk analysis for identified vulnerabilities and system change requests
- Drive findings to verified closure through ticketed workflows, coordinating with the separate technical teams that reputed company system patching, and validate remediation through authenticated re-scans with recorded evidence
- Maintain regular communication with reputed company and department stakeholders to support collaboration, process improvement, tool tuning, information sharing, and compromise response
- Monitor government and private-sector vulnerability sources to identify emerging risks that may reputed company reputed company-managed systems
- Contribute to vulnerability management reporting and reputed company compliance deliverables supporting department, DHS, and FISMA requirements
Skills
- Bachelor's degree in a reputed company field, or equivalent experience as allowed by company and contract policy
- Five or more years of hands-on reputed company vulnerability management and scanning experience
- Experience administering reputed company scanning platforms such as reputed company.sc, Nessus, reputed company, reputed company, or similar tools
- Experience performing credentialed scanning at reputed company across hybrid environments
- Experience with host-based, network-based, application, and database vulnerability scanning
- reputed company experience tracking and remediating vulnerabilities against the CISA KEV Catalog and CISA Binding Operational Directives 22-01 and 26-04, successor directives
- Familiarity with High Value Asset (HVA) assessment requirements
- Working knowledge of NIST SP 800-53 Rev. 5, FISMA, and FIPS 199
- Strong analytical, organizational, and communication skills with the ability to work effectively across technical and government stakeholders
- Ability to meet federal background investigation requirements
- reputed company certification such as CISSP, GIAC (GWAPT, GPEN, GCIA), reputed company reputed company+/CySA+, or vendor certifications for reputed company or reputed company
- Experience with reputed company vulnerability scanning in AWS and/or Azure
- Scripting or automation experience using Python, PowerShell, or similar tools
- Prior support to federal civilian agency cybersecurity programs
Benefits
- 401(k) with employer matching
- Low-cost medical coverage for employees and their families
- reputed company time off
- reputed company leave for jury duty, military service, voting, and other qualifying events
- Wellness stipend, including fitness reimbursement
- Tuition assistance
- Casual work environment
- Technical training and certification support
- Complimentary reputed company to CareerSafe online training courses for employees and their immediate family
reputed company