Vulnerability Management Engineer

We are looking for a detail-oriented cybersecurity professional to support enterprise vulnerability management operations and strengthen the organization’s security posture. In this role, you will monitor vulnerability scans, investigate scanning issues, validate remediation activities, and help ensure that security findings are addressed within established timelines. You will work with vulnerability management platforms, security dashboards, ticketing systems, and asset data to track risks and maintain accurate documentation. Collaborating with asset owners and internal technical teams, you will support vulnerability advisories, exception reviews, and external attack surface management activities. The position offers an opportunity to build hands-on experience with enterprise security tools, risk assessment processes, and remediation workflows. As your expertise develops, you may also contribute to security engineering initiatives, automation, and continuous process improvement in a remote working environment.

• Basic understanding of cybersecurity fundamentals, including vulnerabilities, risk ratings, CVEs, remediation processes, and security patching.

• Foundational knowledge of networking concepts, including IP addresses, subnets, ports, protocols, and network connectivity.

• Basic familiarity with Windows and Linux operating systems, network devices, databases, and cloud or virtualized environments.

• Ability to work with security dashboards, reports, CSV exports, ticketing systems, and documented operational procedures.

• Strong attention to detail when validating asset information, vulnerability findings, scan results, remediation evidence, and exception requests.

• Good written communication skills, with the ability to document findings clearly, update tickets accurately, and follow up effectively with stakeholders.

• Willingness to learn enterprise vulnerability management platforms, IT service management tools, configuration management database (CMDB) processes, and security operations workflows.

• A proactive and accountable approach to assigned tasks, with the ability to follow issues through to resolution and escalate blockers when necessary.

• Ability to collaborate effectively with internal teams, asset owners, and requestors while maintaining professional communication and accurate records.

• Strong organizational skills, disciplined time management, and the ability to work independently in a remote environment while providing regular progress updates.

• Curiosity, adaptability, and motivation to develop broader cybersecurity and security engineering capabilities.

• Preferred qualification: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Electronics, or a related field.

• Preferred certifications or training: CompTIA Security+, CompTIA Network+, Certified in Cybersecurity (CC), or equivalent foundational cybersecurity learning. Certifications are beneficial but not mandatory.