CTEM Engineer

We need to output HTML fragment with sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. The posting includes: About Courser (company description) - could be "About the role"? Actually "About Courser" is company description. The role description: "Continuous Threat Event Monitoring (CTEM) Engineer The CTEM Engineer leads...". So we can put that under "About the role". Then responsibilities list: many bullet points under "Key Responsibilities:" - we can put under Responsibilities. Then qualifications: "Key Qualifications:" list - we can put under Qualifications. Also there is "Preferred Experience:" maybe part of Qualifications or Skills. Also "Why you’ll love working here" and "Benefit Highlights" - we can put under Benefits. Also there is "Physical Demands and ADA Requirements" etc - that's not needed? It's substantive but not requested sections; we could maybe include under Requirements? But instructions: include a section only when posting has real specific content for it. We have sections: About the role, Responsibilities, Qualifications, Benefits. Possibly Skills? The posting includes skills like scripting, etc. Could be under Skills. But we can also incorporate into Qualifications. Better to have separate Skills if there is explicit list. There's "Experience coordinating..." etc. Might be better to put under Qualifications. The instruction: Prefer a few substantive sections over many thin ones. So we can combine. Pay and Schedule: not mentioned, so omit. Thus output HTML with sections: About the role, Responsibilities, Qualifications, Benefits. We need to use

for section headings. Use

• for any list of duties/requirements/benefits, and

  for prose. We must preserve all substantive information; do not invent or summarize away detail. Remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. So we need to strip out the Equal Opportunity Employer, Physical Demands and ADA Requirements, etc. Also remove "Powered by JazzHR ..." and maybe the "Why you’ll love working here" is okay as part of Benefits? It's more about culture; but we can include under Benefits as prose. We need to keep benefit highlights list. Let's extract content: About Courser paragraph: "About Courser Courser accelerates the growth of IT service provider companies. We forge dynamic partnerships, leveraging our values of Teamwork, Service, Growth-Mindedness, Trust, and Innovation to deliver impactful solutions and phenomenal customer experiences. If you thrive in a fast-paced IT environment, join our rapidly expanding team and contribute to our ongoing success." Then role description: "Continuous Threat Event Monitoring (CTEM) Engineer The CTEM Engineer leads the continuous identification, validation, prioritization, and remediation of security exposures across managed environments. This role owns the CTEM platform and vulnerability management lifecycle, ensuring threats are accurately assessed and remediated according to risk, business impact, and contractual service commitments. The CTEM Engineer collaborates with MSP partners, security operations, and technical teams to coordinate remediation activities, monitor program performance, and reduce organizational cyber risk. Key responsibilities include exposure monitoring, vulnerability validation, remediation oversight, stakeholder communication, and maintaining accountability for timely and effective resolution of identified risks. This position plays a critical role in strengthening security posture, improving operational resilience, and driving measurable risk reduction outcomes." We can combine as About the role. Responsibilities: list after "Key Responsibilities:" each bullet starts with a verb. We need to capture each line. Let's list them: - Continuously monitor and assess vulnerabilities, exposures, and security risks across managed environments using the CTEM platform and associated security monitoring tools - Validate vulnerability detections and threat exposures to eliminate false positives and ensure remediation efforts focus on verified risk - Respond to critical and high-risk vulnerability findings by coordinating timely investigation, escalation, and remediation activities - Prioritize remediation efforts based on risk, exploitability, business impact, and service-level commitments - Partner with MSP engineers, internal technical teams, and security stakeholders to drive vulnerabilities through the remediation lifecycle to closure - Track remediation progress and ensure vulnerabilities are resolved within established SLAs and customer commitments - Conduct operational analysis of CTEM processes, workflows, and remediation outcomes to identify bottlenecks and opportunities for continuous improvement - Perform routine platform administration, including configuration management, policy updates, integrations, and system maintenance - Maintain detailed documentation of vulnerability investigations, remediation activities, exceptions, and customer communications - Develop and maintain reporting dashboards and metrics that provide visibility into exposure trends, remediation performance, SLA compliance, and overall risk posture - Support security architecture and technology improvement initiatives by identifying recurring exposure patterns and recommending long-term corrective actions - Document lessons learned from vulnerability and remediation activities and implement preventative measures to reduce future risk - Develop and maintain automation, scripting, and workflow enhancements that improve operational efficiency and accelerate remediation efforts - Continuously improve CTEM monitoring, detection, prioritization, and reporting capabilities to enhance proactive risk management - Build and maintain effective working relationships with MSP partners and internal stakeholders to ensure consistent and timely remediation outcomes - Provide regular status updates and executive-ready reporting on vulnerability management performance, exposure reduction efforts, and program effectiveness That's all. Qualifications: after "Key Qualifications:" list: - Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field preferred - 1-3 years of experience in vulnerability management, security operations, exposure management, or a related cybersecurity discipline - Strong understanding of vulnerability management methodologies, risk assessment frameworks, and remediation best practices - Experience working with vulnerability management and security monitoring platforms such as Rootshell, Qualys, Nessus, Microsoft Defender, SentinelOne, and Huntress - Knowledge of vulnerability scoring and prioritization models, including CVSS, KEV, and risk-based remediation approaches - Solid understanding of network and security fundamentals, including TCP/IP, DNS, VPNs, firewalls, authentication protocols, and endpoint security controls - Familiarity with operating system administration and endpoint management across Windows, macOS, and Linux environments - Working knowledge of cloud security concepts and platforms, including Microsoft Azure, AWS, and Google Cloud Platform (GCP) - Experience coordinating vulnerability remediation efforts across technical teams, MSPs, or third-party service providers - Understanding of incident management, problem management, change management, and service delivery processes - Proficiency in scripting or automation technologies such as PowerShell, Python, or Bash - Experience developing reports, dashboards, and metrics to measure vulnerability management and remediation performance - Strong analytical, troubleshooting, and risk assessment skills with the ability to prioritize competing remediation activities - Excellent written and verbal communication skills, including the ability to communicate technical risks to both technical and non-technical stakeholders - Strong organizational skills with the ability to manage multiple remediation efforts while maintaining SLA compliance - Relevant industry certifications such as Security+, CySA+, SC-200, SC-300, CISSP, GSEC, or comparable certifications are preferred Then "Preferred Experience:" list: - Experience working within a Managed Service Provider (MSP) environment - Familiarity with Continuous Threat Exposure Management (CTEM) frameworks and vulnerability lifecycle management - Knowledge of security frameworks such as NIST CSF, CIS Controls, NIST 800-53, or ISO 27001 - Experience integrating vulnerability management platforms with ticketing, reporting, and automation systems - Understanding of exposure validation, attack path analysis, and risk-based prioritization techniques - Experience leveraging automation to improve remediation workflows and operational efficiency We could incorporate Preferred Experience into Qualifications or Skills. Since we want few sections, we can add them under Qualifications as additional bullet points. Benefits: after "Benefit Highlights" list: - Competitive benefits package, including medical, dental, vision, and life insurance - 401(k) company match - Flexible vacation time* - Paid sick time - 10 Holidays including your Birthday and a Floating Holiday! - Healthy Lifestyle reimbursement - Membership Subsidy - 40 Hours for Volunteer Time - Paid parental leave - Reimbursement for ongoing certifications - Flexible vacation time after completing one full year of employment. For the first year of employment, full-time team members are provided 10 vacation days. Note there is duplicate "Flexible vacation time*" and later explanation; we should keep both but maybe combine? The instruction: preserve ALL substantive information; do not invent or summarize away detail. So we need to keep both lines. However the second line is a sentence explaining flexible vacation time. We'll keep as separate bullet. Also there is "Why you’ll love working here" paragraph: "At Courser, we prioritize the personal and professional development of our employees. We offer best-in-class training, mentorship, and clear self-promotion paths to help you grow. We foster a culture of innovation and encourage challenging the status quo. With teams located across the country, we leverage a wealth of knowledge and a collaborative spirit, eager to share and grow together." We can include that as part of Benefits section prose before the list, or as separate subsection? Since we only have Benefits section, we can put that prose in a

  then the list. We must not include boilerplate like Physical Demands, ADA, Equal Opportunity Employer, Powered by JazzHR. Now construct HTML:

  About the role

  About Courser Courser accelerates the growth of IT service provider companies. We forge dynamic partnerships, leveraging our values of Teamwork, Service, Growth-Mindedness, Trust, and Innovation to deliver impactful solutions and phenomenal customer experiences. If you thrive in a fast-paced IT environment, join our rapidly expanding team and contribute to our ongoing success. Continuous Threat Event Monitoring (CTEM) Engineer The CTEM Engineer leads the continuous identification, validation, prioritization, and remediation of security exposures across managed environments. This role owns the CTEM platform and vulnerability management lifecycle, ensuring threats are accurately assessed and remediated according to risk, business impact, and contractual service commitments. The CTEM Engineer collaborates with MSP partners, security operations, and technical teams to coordinate remediation activities, monitor program performance, and reduce organizational cyber risk. Key responsibilities include exposure monitoring, vulnerability validation, remediation oversight, stakeholder communication, and maintaining accountability for timely and effective resolution of identified risks. This position plays a critical role in strengthening security posture, improving operational resilience, and driving measurable risk reduction outcomes.

  Responsibilities

  • Continuously monitor and assess vulnerabilities, exposures, and security risks across managed environments using the CTEM platform and associated security monitoring tools
  • Validate vulnerability detections and threat exposures to eliminate false positives and ensure remediation efforts focus on verified risk
  • Respond to critical and high-risk vulnerability findings by coordinating timely investigation, escalation, and remediation activities
  • Prioritize remediation efforts based on risk, exploitability, business impact, and service-level commitments
  • Partner with MSP engineers, internal technical teams, and security stakeholders to drive vulnerabilities through the remediation lifecycle to closure
  • Track remediation progress and ensure vulnerabilities are resolved within established SLAs and customer commitments
  • Conduct operational analysis of CTEM processes, workflows, and remediation outcomes to identify bottlenecks and opportunities for continuous improvement
  • Perform routine platform administration, including configuration management, policy updates, integrations, and system maintenance
  • Maintain detailed documentation of vulnerability investigations, remediation activities, exceptions, and customer communications
  • Develop and maintain reporting dashboards and metrics that provide visibility into exposure trends, remediation performance, SLA compliance, and overall risk posture
  • Support security architecture and technology improvement initiatives by identifying recurring exposure patterns and recommending long-term corrective actions
  • Document lessons learned from vulnerability and remediation activities and implement preventative measures to reduce