Infrastructure Security Vulnerability Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Infrastructure Security Vulnerability Engineer reducing vulnerability risk across Avaya’s FedRAMP cloud environments. Coordinating remediation, compliance, reporting, and security improvements for federal-government operations.
Responsibilities:
- Lead and coordinate vulnerability remediation across infrastructure and applications
- Evaluate vulnerabilities using CVE/CVSS data, exploitability, threat intelligence, asset criticality, attack paths, and exposure information
- Align remediation activities with CISA BOD 26-04 and other federal cybersecurity directives
- Support vulnerability assessment and remediation across Windows Server, Linux/RHEL, and application environments
- Use Tenable Security Center, Nessus, and Qualys to review findings and validate remediation
- Partner with application owners, infrastructure teams, vendor managers, and risk partners to drive issues to closure
- Maintain vulnerability records and remediation status in ServiceNow or other systems of record
- Coordinate patching and remediation through established change management processes
- Support exception management, risk-based remediation, incident-driven response, and escalation of overdue vulnerabilities
- Use cloud-based AI tools to support vulnerability identification, analysis, prioritization, and remediation workflows
- Develop vulnerability management metrics and reports covering remediation progress, aging, overdue findings, and risk trends
- Improve vulnerability management procedures, remediation workflows, reporting accuracy, and operational efficiency
- Document findings, remediation activities, exceptions, and supporting processes
Requirements:
- US citizenship required
- Must be currently authorized to work in the United States without visa sponsorship now or in the future
- 5–6 years of experience and a Bachelor degree or equivalent, or 4 years of experience and a Master degree or equivalent
- 3–5+ years of experience in vulnerability management, vulnerability remediation, patch management, or closely related infrastructure security
- Hands-on experience with Tenable Security Center, Nessus, and Qualys
- Working knowledge of Windows Server 2019 and later
- Experience supporting Linux environments, particularly RHEL 9.x and later
- Understanding of CVE and CVSS analysis, exploitability, threat intelligence, asset criticality, and exposure-based remediation
- Experience coordinating vulnerability remediation and patch management through closure
- Familiarity with change management processes
- Experience using ServiceNow ticketing or similar systems
- Strong Microsoft Excel and reporting skills
- Strong written and verbal communication, analytical, organizational, and troubleshooting skills
- Ability to work within a regulated cloud environment and follow security, compliance, documentation, and risk management processes
- Preferred familiarity with FedRAMP, NIST SP 800-53, DISA STIGs, CISA KEV information, federal or DoD environments, PowerShell, Bash, Python, ManageEngine Endpoint Central, VMware, Active Directory, application security, cloud security, and AI-assisted tools
- Relevant cybersecurity, vulnerability management, infrastructure security, or cloud security certifications are desirable, including Security+, CySA+, or CISSP
Benefits:
- Benefits offered (not otherwise specified)
- Meaningful cybersecurity impact supporting critical federal government operations
- Technical problem-solving across infrastructure, applications, security tools, and remediation processes
- Cross-functional collaboration with application owners, infrastructure engineers, vendors, and risk stakeholders
- Continuous improvement through automation, analytics, and AI-assisted capabilities
Similar Jobs
Cybersecurity Specialist
Cybersecurity Specialist monitoring alerts and investigating incidents for CyberMaxx’s managed detection and response cybersecurity services. Supporting threat detection, customer response, and SOC operations.
Senior Information Security Engineer
Information Security Engineer monitoring threats and vulnerabilities for First American's title insurance, settlement, and property technology solutions. Operating security tools, incident response, risk analysis, and recovery processes.
Senior Information Security Engineer
Senior Cloud Security Engineer operating CNAPP platforms and securing cloud environments at First American India. Driving cloud risk remediation across infrastructure, applications, Kubernetes, and DevSecOps teams.
Senior Security Consultant
Senior Security Consultant designing low-voltage and communication systems for ARES data center infrastructure projects. Coordinating BIM, documentation, budgets, and project stakeholders.
Red Team Security Engineer
Red Team Security Engineer validating vulnerabilities, attack paths, and AI-enabled systems. Strengthening defenses for Backblaze’s open cloud storage platform through offensive and purple-team exercises.
Online Visiting Professor – Cybersecurity
Online Visiting Professor teaching undergraduate and graduate cybersecurity courses for DeVry University. Developing course materials, assessing students, and integrating responsible AI into instruction.
Information Security Specialist
Information Security Specialist protecting Farmers’ global insurance systems and data from cybersecurity risks. Assessing vulnerabilities, managing incidents, strengthening controls, and advising technology teams.
Strategic Solution Sales Executive – Cybersecurity
Strategic cybersecurity sales executive driving OpenText solution growth across U.S. enterprise accounts. Leading complex solution sales cycles and executive stakeholder engagements.
Security Cooperation Financial Management Specialist – Lead
Financial management specialist supporting U.S. Combatant Commands with DAI accounting, audit readiness, and process improvement. Remote role for Koniag Government Services’ federal defense operations.
Manager, Application Security – SOX IT, Oracle Fusion
Application Security Manager securing Oracle Fusion, EPM, and OIC environments for Paramount’s global media and entertainment company. Leading SOX compliance, identity governance, and segregation-of-duties controls.
Senior Security Engineer, Threat Detection and Response
Senior Security Engineer investigating threats, building detection automation, and improving incident response. Supporting U.S.-based corporate and production environments through security engineering and threat hunting.
Staff Security Engineer, Security Enablement
Staff Security Engineer designing DoorDash’s global physical and cloud security systems. Leading multi-team programs, AWS infrastructure, security integrations, and enterprise risk reduction.
Cybersecurity Intern
Cybersecurity Intern gaining hands-on experience in security operations, vulnerability management, and incident response. Supporting cybersecurity projects at global electronics manufacturer Kimball Electronics.
Ethical Hacker – Penetration Tester
Pentester conduzindo avaliações ofensivas em infraestrutura, aplicações, redes Wi-Fi e soluções de IA. Grupo Trade Technology oferece tecnologia, segurança e transformação digital.
Staff Mobile Security Engineer
Staff Mobile Security Engineer securing MrBeast’s large-scale mobile media, gaming, and fintech experiences. Owning device integrity, fraud defense, and security engineering team growth.
Security Engineer
Security Engineer investigating high-impact incidents and building SIEM-based detections for Expleo, a global engineering and technology services provider. Remote role for candidates living in Portugal.
Information Security Officer
Information Security Officer maintaining Finom’s certified ISMS, risk framework, audits, and supplier assessments. Supporting compliance for the company’s European B2B financial platform.
Information Security Officer
Information Security Officer maintaining ISMS, audits, and ICT risk management for Finom’s European financial platform. Improving compliance through supplier assessments, reporting, automation, and regulatory monitoring.
Information Security Officer
Information Security Officer managing ISMS, audits, vendor assessments and ICT risk for Finom’s European financial platform. Reporting to the CISO and improving compliance through automation.
Application Security Architect
Application Security Architect securing NinjaOne’s unified IT operations platform. Leading threat modeling, secure architecture reviews, and security initiatives across software, cloud, infrastructure, and identity.