Vulnerability Management Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Vulnerability Management Engineer for Workstreet assisting startups in managing cybersecurity risks. Focusing on hands-on vulnerability identification, prioritization, and remediation within client environments.
Responsibilities:
- Orchestrate Vulnerability Scanning Infrastructure: Configure, schedule, and maintain authenticated credentials, scan policies, and asset groups across client networks and cloud-native environments using enterprise platforms (Tenable/Nessus, Qualys, Rapid7 InsightVM, and Vanta).
- Execute Threat Analysis and Risk Prioritization: Evaluate raw scan outputs and filter false positives; apply advanced risk-based prioritization data utilizing CVSS base scores, EPSS real-time exploit indices, global threat intelligence feeds, and critical client asset contexts.
- Drive Collaborative Remediation and Governance: Translate technical vulnerabilities into clear, actionable architectural guidance and patch-management workflows; partner directly inside the trenches with client software engineers and IT teams to multi-thread remediation efforts and accelerate their sub-30-day time-to-remediate velocity.
- Manage Exceptions and Audit Compliance: Document, verify, and track formal client requests for temporary vulnerability exceptions or long-term risk acceptances; map operational patching data directly to control evidence required for regulatory audits (SOC 2, ISO 27001, HIPAA, CMMC, and NIST).
- Own the Advisory Client Experience: Act as the strategic primary point of contact and trusted security advisor for an assigned portfolio of fast-growth startups; deliver regular project milestones, handle high-priority technical escalations with calm professionalism, and generate regular status reports and executive summaries that communicate technical risk as clear business value.
Requirements:
- Proven enterprise vulnerability engineer - Command direct operational execution configuring, deploying, and maintaining industry-leading vulnerability discovery platforms, explicitly leveraging Tenable/Nessus, Qualys, Rapid7 InsightVM, or Vanta.
- Surgical risk prioritizer - Mastered advanced risk scoring architectures including CVSS base scores and EPSS real-time exploit probability indices to isolate, rank, and target high-consequence threats.
- Precision threat analyst - Deconstructed massive raw scanning datasets, systematically validated results to eliminate false positives, and converted intricate technical threat data into clear business risk metrics.
- Advanced infrastructure posture auditor - Diagnosed, categorized, and cataloged diverse vulnerability classes, cloud/container exposure vectors, active exploit mechanisms, and configuration weaknesses across distributed system architectures.
- GRC architecture strategist - Aligned automated infrastructure scanning protocols directly against regulatory compliance frameworks, specifically matching continuous monitoring records to strict audit evidence controls for SOC 2, ISO 27001, HIPAA, and CMMC.
- High-velocity technical consultant - Engineered clear technical blueprints, structured project milestones, and progress matrices while simultaneously orchestrating deliverables across an active portfolio of client accounts.
- Elite stakeholder diplomat - Built immediate trust and drove technical risk calibrations directly with US-based tech founders, engineering executives, and corporate leaders using clear, business-friendly communication.
- Orchestration of patch management pipelines - Proven history managing full-lifecycle patch deployments, technical change management workflows, and remediation sequences alongside distributed IT, DevOps, and software engineering teams within a managed service provider (MSP/MSSP) or consulting environment.
- Credentialed cybersecurity specialist - Hold active, validated professional industry markers such as CompTIA Security+, CEH, Tenable Certified Security Associate, or GIAC GEVA.
- Cloud-native security engineering - Direct exposure mapping, configuring, and defending cloud-native vulnerability surfaces across public multi-cloud public hosting platforms, explicitly AWS, GCP, and Azure environments.
- Command of threat intelligence syndication - Advanced navigation of the CVE lifecycle, National Vulnerability Database (NVD) registries, and active threat feed integrations to intercept and anticipate real-world exploits.
Benefits:
- Career Development: Clear path with mentorship and training opportunities
- Technical Training: Comprehensive onboarding on security and compliance frameworks
- Competitive Compensation: A competitive base salary with regular performance reviews linked to merit-based appraisals and bonus opportunities.
- Growth Opportunity: Early-stage company with significant room for career advancement.
- Remote-First Culture: Flexibility to work from anywhere while collaborating with a global team.
Similar Jobs
Vulnerability Management Engineer
Vulnerability Management Engineer providing consultative security services by identifying and remediating vulnerabilities for fast-growth startups. Hands-on role requiring expertise in cloud platforms like AWS, Azure, and GCP.
Ventilation Hygiene Engineer – Team Leader
Ventilation Hygiene Engineer Team Leader at Indepth Hygiene Services managing a two-person team across Reading/Slough/Bracknell. Focused on grease extraction & fire damper testing with solid pay and career growth opportunities.
CUDA Engineer
CUDA Engineer writing and optimizing performance-critical GPU code at a renewable energy startup. Focusing on high-performance compute infrastructure to support AI applications.
Ontology Engineer
Ontology Engineer designing and maintaining semantic knowledge models. Collaborating with AI engineers to improve data integration and interoperability for enterprise applications.
Optimization Engineer
Engenheiro de Otimização para melhorias em desempenho de tecnologia de rádio em empresa Ericsson. Atuar na análise, implementação e suporte de soluções para otimização de sistemas RAN.
Bridge Engineer II
Bridge Engineer II contributing to the design and delivery of bridge projects. Work across Montana and the Western United States with a focus on structural engineering tasks.
Chief Engineer, Oil Chemical Tanker
Chief Engineer maintaining Engine room machinery for Columbia Shipmanagement. Responsible for operations and performance in maritime environment with multicultural teams.
Combustion Engineer
Combustion Engineer responsible for equipment start-ups, maintenance, and technical issue resolution in the UK. Ensuring operational efficiency and safety for industrial systems.
Forward Deployed Engineer
Forward Deployed Engineer tackling defense and national security problems through technology solutions using Palantir Foundry. Collaborating with customers to optimize real-time situational awareness and force protection.
EPC Transmission Line Project Engineer
EPC Project Engineer providing technical leadership and execution for HV/EHV transmission projects. Coordinate multidisciplinary engineering deliverables ensuring quality and compliance across all stages of project execution.
Commissioning Engineer
Technical Support Specialist ensuring effective service portfolio delivery for ABB. Communicating with customers, executing technical support, and identifying sales opportunities in electrical solutions.
Expert Engineer – AEM
Expert Engineer designing and developing high-performance web experiences using Adobe AEM at MissionSquare. Collaborating and mentoring developers while optimizing digital content delivery for public sector employees.
Industrial Controls Engineer
Advanced Industrial Controls Engineer developing Industrial Control systems using PLCs and driving innovations at Symbotic. Collaborating with teams to enhance automation processes and troubleshoot issues effectively.
2nd Engineer, Oil Chemical Tanker
Seafarer responsible for operation and maintenance of Engine room and machinery equipment at Columbia Shipmanagement. Requires experience, valid STCW certifications, and good English communication.
Capture Engineer
Capture Engineer managing state client relationships at Nava PBC. Developing strategies, building relationships, and contributing to government technology projects.
Environmental Engineer
Environmental Engineer at SC&A providing policy support and evaluation of waste treatment facilities. Engaging in site visits and client interactions with up to 30% travel requirement.
Identity Engineer
Identity Engineer supporting Milliman’s global Identity & Access Management service by engineering and operating identity capabilities. Collaborating across teams to improve identity services and reduce risk.
Ingegnere per Lezioni di Matematica
Ingegnere per lezioni di matematica in piattaforma di lezioni private. Offri lezioni a studenti e prepara programmi specifici per il loro apprendimento.
Ingegnere, Aiuto Compiti di Matematica
Ingegnere per aiuto compiti di matematica cercasi in Italia. Dare supporto a studenti con bisogni didattici specifici.
Piping Engineer
Piping Engineer with nuclear industry experience supporting piping design, analysis, and engineering in remote role. Focus on ensuring effective and compliant plant operations.