Vulnerability Management Engineer

About the role

The Vulnerability Management & Offensive Security (VMOS) team at the University of Chicago Medicine (UCM) is seeking a mid-level professional to join our dynamic team. Our team is dedicated to safeguarding UCM's digital environment by proactively identifying and addressing security risks.

Responsibilities

• Aid in executing vulnerability scans and monitor scan results.
• Support in triaging and prioritizing vulnerabilities for remediation.
• Identify asset and application owners and coordinate patching efforts.
• Assess and communicate vulnerability risk.
• Participate in vulnerability validation and penetration sing activities.
• Contribute to red team and purple team exercises.
• Document findings and assist in preparing reports.
• Maintain scanning application configuration.
• Collaborate with team members and other departments to improve security.
• Stay informed about basic cybersecurity threats and vulnerabilities.
• Manage and maintain exceptions for scanning and vulnerability patching.

Requirements

• Bachelor’s degree in Computer Science, Information Security, or related field, or equivalent internship/work experience.
• 3 to 5 years of experience in vulnerability management.
• Well-rounded understanding of vulnerability management concepts.
• Familiarity with network protocols, operating systems, and web technologies.
• Strong analytical and communication skills.
• Experience with vulnerability management and scanning tools.

Qualifications

• Relevant security related certifications (e.g., Security+, CEH).
• Experience with Rapid7.
• Eagerness to learn and grow in offensive security.

Benefits

This position offers a strong foundation for a career in cybersecurity within a complex healthcare setting. UChicago Medicine is an equal opportunity employer and provides comprehensive benefits including medical, dental, vision, retirement plans, and paid time off.

Pay

The pay range for this position is based on a full-time equivalent (1.0 FTE) and is reflective of current market data, reviewed on an annual basis. Compensation offered at the time of hire will vary based on candidate qualifications and experience and organizational considerations, such as internal equity.

Schedule

The position is available on a full-time basis (1.0 FTE) and works on a day shift.