CTEM Engineer

About the role

The CTEM Engineer leads the continuous identification, validation, prioritization, and remediation of security exposures across managed environments. This role owns the CTEM platform and vulnerability management lifecycle, ensuring threats are accurately assessed and remediated according to risk, business impact, and contractual service commitments. The CTEM Engineer collaborates with MSP partners, security operations, and technical teams to coordinate remediation activities, monitor program performance, and reduce organizational cyber risk. This position plays a critical role in strengthening security posture, improving operational resilience, and driving measurable risk reduction outcomes.

Responsibilities

• Continuously monitor and assess vulnerabilities, exposures, and security risks across managed environments using the CTEM platform and associated security monitoring tools.
• Validate vulnerability detections and threat exposures to eliminate false positives and ensure remediation efforts focus on verified risk.
• Respond to critical and high-risk vulnerability findings by coordinating timely investigation, escalation, and remediation activities.
• Prioritize remediation efforts based on risk, exploitability, business impact, and service-level commitments.
• Partner with MSP engineers, internal technical teams, and security stakeholders to drive vulnerabilities through the remediation lifecycle to closure.
• Track remediation progress and ensure vulnerabilities are resolved within established SLAs and customer commitments.
• Conduct operational analysis of CTEM processes, workflows, and remediation outcomes to identify bottlenecks and opportunities for continuous improvement.
• Perform routine platform administration, including configuration management, policy updates, integrations, and system maintenance.
• Maintain detailed documentation of vulnerability investigations, remediation activities, exceptions, and customer communications.
• Develop and maintain reporting dashboards and metrics that provide visibility into exposure trends, remediation performance, SLA compliance, and overall risk posture.
• Support security architecture and technology improvement initiatives by identifying recurring exposure patterns and recommending long-term corrective actions.
• Document lessons learned from vulnerability and remediation activities and implement preventative measures to reduce future risk.
• Develop and maintain automation, scripting, and workflow enhancements that improve operational efficiency and accelerate remediation efforts.