Vulnerability Management Engineer

Vulnerability Management Program Development

Build and operationalize a mature vulnerability management program across a large and continuously changing enterprise asset environment.

Reconcile and maintain an authoritative asset inventory across multiple security and identity platforms.

Identify asset visibility and scanner coverage gaps to improve overall security posture.

Vulnerability Management Program Development

• Reconcile asset data across:
  • Tenable
  • CrowdStrike
  • Okta
  • Active Directory
  • Microsoft Intune
  • ServiceNow CMDB
• Identify scanner, agent, and asset coverage gaps.
• Aggregate and de-duplicate vulnerability findings from multiple sources.
• Establish a baseline of the organization's current vulnerability posture.

Risk-Based Prioritization

• Enrich vulnerability data using:
• CVSSE
• PSA
• SCA
• Known Exploited Vulnerabilities (KEV)
• NodeZero validated-exploitable findings
• Produce and maintain a risk-ranked vulnerability register.
• Prioritize remediation efforts based on business risk and exploitability.

ServiceNow Vulnerability Response Engineering

• Design, build, and configure the ServiceNow Vulnerability Response workflow, including:
• Intake
• Prioritization
• Assignment
• Tracking
• Verification
• Re-scanning
• Closure
• Develop risk-based Service Level Agreements (SLAs).
• Establish exception handling and risk acceptance processes.
• Integrate workflows within ServiceNow SecOps.

Remediation & Program Operations

• Drive initial remediation efforts for the organization's highest-risk vulnerabilities in partnership with infrastructure and application owners.
• Coordinate remediation activities across multiple technical teams.
• Track remediation progress and report on key program metrics.
• Develop executive-ready reporting and dashboards.

Documentation & Operational Support

• Author operational runbooks and standard operating procedures.
• Transition the vulnerability management program into steady-state operations.
• Provide weekly project status updates and implementation progress.

AI-Driven Security Engineering

• Utilize frontier AI models such as ChatGPT Enterprise and Claude to accelerate:
• Vulnerability analysis
• Find de-duplication
• Risk prioritization
• Reporting
• Workflow design
• Operational documentation
• Apply AI responsibly while following enterprise governance and security best practices.

Required Qualifications

• Hands-on experience operating enterprise vulnerability management platforms, including:
• Tenable
• CrowdStrike Falcon Spotlight / Exposure Management
• Strong understanding of:
• Vulnerability lifecycle management
• Asset inventory reconciliation
• Risk-based remediation
• Enterprise security operations
• Experience prioritizing vulnerabilities using:
• CVSSE
• PSA
• SCA
• Known Exploited Vulnerabilities (KEV)
• Validated exploitability methodologies
• Hands-on experience building ServiceNow Vulnerability Response / SecOps workflows (required and non-negotiable).
• Experience coordinating remediation across infrastructure and application teams.
• Experience designing remediation SLAs and executive reporting.
• Proficiency using frontier AI models, including ChatGPT Enterprise and Claude, within security engineering workflows.
• Ability to work independently and drive initiatives from discovery through operational maturity.

Preferred Qualifications

• Experience with the following technologies is highly desired:
• NodeZero
• CrowdStrike NG-SIEM
• ServiceNow CMDB
• Patch management platforms
• Change management processes
• CMDB reconciliation
• Industry Experience In Insurance
• Financial Services
• Other regulated industries

Preferred Certifications

• CISSP
• GCIH
• Tenable Certified Practitioner (TCP)
• Certified Penetration Tester (CPT)
• Certified Information Systems Security Professional (CISSP)
• Certified Information Systems Auditor (CISA)
• Certified Information Systems Security Professional (CISSP)
• Certified Information Systems Security Professional (CISSP)
• Certified Information Systems Security Professional (CISSP)

Technology Environment

• Tenable
• CrowdStrike Falcon Spotlight / Exposure Management
• CrowdStrike NG-SIEM
• NodeZero
• Okta
• Active Directory
• Microsoft Intune / MDM
• ServiceNow Vulnerability Response
• ServiceNow SecOps
• ServiceNow CMDB
• ChatGPT Enterprise
• Claude

Work Environment

• Full-time remote position
• Collaborative IT Security Engineering team operating within a SAFe Agile framework
• ServiceNow utilized for ITSM and Security Operations
• Zoom used for collaboration and team communication
• AI-forward culture where frontier AI models are actively incorporated into engineering workflows
• Fast-paced, acquisition-driven environment requiring flexibility, adaptability, and strong execution

Initial Project Focus

• Building a comprehensive asset inventory and identifying coverage gaps.
• Conducting a current-state vulnerability assessment.
• Developing and implementing the ServiceNow Vulnerability Response workflow.
• Establishing remediation SLAs and driving initial remediation efforts.
• Creating operational runbooks and transitioning the program into steady-state operations.