Vulnerability Management Engineer

Vulnerability Management Engineer

Hybrid, Tampa, FL

Reporting to the Senior Manager, Platform Security Services, the Vulnerability Management Engineer will be responsible for overseeing the operation of vulnerability assessments for assigned customers, implement and oversee scanning technologies to discover, prioritize security flaws for remediation, and collaborate with system/application owners to facilitate the remediation and closure of vulnerabilities.

The Vulnerability Management Engineer will operationally integrate with the customer’s patch management activities and perform validation of applied and/or missing patches. Additionally, they will perform security testing on pre-production systems and applications to close vulnerabilities prior to production deployment.

In this role, you’ll get to own:

Vulnerability Lifecycle & Managed Services

• Deliver vulnerability management as a service, overseeing multiple workstreams while meeting specific service-level (SLA) commitments.
• Manage the full remediation lifecycle by collaborating with infrastructure and application owners on security hot-fixes and patch validation.
• Perform discovery and grouping of network-connected systems to ensure comprehensive scanning across networks, OSs, apps, and databases.
• Conduct regular scans on both production and pre-production deployments to identify flaws before and after release.
• Create remediation reports and dashboards to track vulnerabilities and remediations
• Assist with attestation scan and compliance report 

Risk Analysis & Technical Strategy

• Analyze vulnerabilities to filter false positives and prioritize remediation based on the actual risk of exploitation.
• Develop remediation action plans and generate tickets for system owners to address identified flaws.
• Speak in-depth on hardening guidelines (NIST, CIS) and implement mitigation factors (Firewalls, IDS/IPS) to reduce risk when patching isn't immediate.
• Analyze new technologies, zero-day threats, and reviews of new technology released by supported vendors to provide mitigation strategies.

Operations, Mentorship & Documentation

• Develop and document Standard Operating Procedures (SOPs) and assist in maintaining automation and scripting tools.
• Support cyber incident response teams with vulnerability discovery and identification during crisis management.
• Mentor, coach, and train other team members while producing educational content like blog posts and vulnerability summary sheets for customers.
• Handle customer escalations regarding technology or remediation issues to ensure successful service delivery.

To be successful in this role, you’ll need to:

• Demonstrate strong customer service and communication skills, both oral and written with the ability to build relationships at all levels
• Possess experience, and demonstrated success, developing and managing an organizational vulnerability management program
• Demonstrate fundamental knowledge of network vulnerability scanning technologies
• Demonstrate an understanding of Web Application Security vulnerabilities and mitigating defenses
• Possess experience with vulnerability remediation management and patching
• Have knowledge of vulnerability management best practices from NIST, ISO, PCI, OWASP, and CIS
• Possess experience in deploying and operating vulnerability scanning infrastructure, services and solutions
• Leverage fundamental technical skills in the following areas:
• Active Directory
• Windows
• Linux
• Networking
• Are proficient in the use of data manipulation, dashboard and reporting tools
• Have earned industry recognized certifications, such as GEVA, CISSP, CISM, GPEN, GIAC, CISA, etc.
• Possess security consulting or managed services experience

Statutory Pay Disclosure:

ITAR Compliance

This position will have access to customer data and as such is subject to International Traffic in Arms Regulations (ITAR). Upon application, candidates will be asked to confirm that they are a U.S. Person as defined by the following:

• A citizen of the U.S.;
• A lawful permanent resident of the United States; 
• A person admitted to the United States as a refugee; or
• A person that has been granted asylum by the United States government.

The intent of this requirement is not to verify employment eligibility overall, but to ensure compliance with import/export regulations. If you do not meet these requirements, we encourage you to apply for other open roles at Deepwatch. This information will be verified upon offer of employment.