Security Engineer, Infrastructure Operations

We are seeking a Security Engineer with deep expertise in Vulnerability and Threat Management (VTM) to lead the identification, assessment, and remediation of security risks across 1111 Systems enterprise infrastructure. This role requires a hands-on engineer with strong experience in vulnerability scanning platforms, threat intelligence integration, and remediation automation within complex environments.

This is a full-time remote role in US reporting to the Director of Infrastructure Security.

Success in this role requires attention to detail, a collaborative mindset, and the ability to operate effectively in a fast-paced 24x7 operational environment. 

• →Lead and mature the design, implementation, and optimization of enterprise Vulnerability & Threat Management programs.
• →Operate and tune vulnerability scanning tools (e.g., Rapid7 InsightVM, Tenable, Qualys) across on-prem and cloud environments.
• →Analyze vulnerability data, prioritize remediation based on risk, exploitability, and business impact.
• →Integrate threat intelligence feeds and SIEM platforms to enhance detection and response capabilities.
• →Collaborate with infrastructure, network, and application teams to drive remediation efforts and reduce risk exposure.
• →Align vulnerability management processes with compliance frameworks (NIST 800-53, CIS Benchmarks, PCI-DSS, ISO 27001), including audit preparation and evidence collection.
• →Automate vulnerability remediation and reporting workflows using PowerShell, Ansible, or similar tools.
• →Perform root cause analysis of recurring vulnerabilities and recommend long-term mitigation strategies.
• →Support and validate patch management processes (WSUS, Automox), ensuring timely remediation aligned with SLAs and compliance requirements.
• →Develop, define and enforce policies and procedures surrounding secure configuration baselines in accordance with CIS benchmarks and established best practices.
• →Generate compliance and risk posture reports and dashboards as required.
• →Lead incident response and threat hunting activities and define processes.
• →Leverage AI in daily activities to enhance our ability to assess, identify and remediate emerging threats and existing vulnerabilities. 

• 5+ years of experience in cybersecurity, with a strong focus on vulnerability and threat management.
• Hands-on experience with vulnerability management platforms (Rapid7 InsightVM preferred).
• Strong understanding of CVSS scoring, exploit frameworks, and risk-based prioritization.
• Experience managing enterprise Windows and Linux environments.
• Strong understanding of virtualization platforms (VMware vSphere/ESXi/VCF) and cloud platforms (AWS, Azure).
• Scripting and automation experience (PowerShell, Python, Bash, or Ansible).
• Knowledge of network security concepts (firewalls, IDS/IPS, segmentation).
• Experience with SIEM tools used for correlating and reporting. (Rapid7 Insight DR, FortiSIEM)
• Experience managing endpoint protection tools (Symantec Endpoint Protection, Defender, Trend VisionOne).
• Practical experience in Penetration testing and/or red team/blue team activities (network, infrastructure, and/or web applications) and tools used in these activities.
• Knowledge of OWASP Top 10 and common web application security risks.
• Familiarity with container and Kubernetes security.
• Relevant certifications (CISSP, CEH, GIAC, or equivalent).
• Must be able to work in the US without a visa sponsorship

• Advanced analytical and problem-solving skills.
• Ability to translate technical risk into business impact.
• Effective cross-team collaboration and communication.
• Proactive approach to risk reduction, threat mitigation and continuous improvement.
• Ability to lead efforts and define policies and procedures within the enterprise.

To perform this job successfully, an individual must be able to perform each essential function satisfactorily. The requirements listed above are representative of the knowledge, skill, and/or ability required. Reasonable accommodation may be made to enable qualified individuals with disabilities to perform the essential functions.