Vulnerability Security Engineer

Description

The role is remote, so you will mainly work from home.

The company helps organisations connect, protect, analyse and act on their data and applications, spanning edge devices through to cloud.

You will join the Cybersecurity team in Information Technology as a vulnerability security engineer at job level TCP04, focused on finding, ranking and getting fixes applied to security weaknesses.

The team wants someone with deep vulnerability management experience who can improve the programme over time and use automation and AI tools to cut risk and save effort.

Responsibilities

• Run the enterprise vulnerability programme end to end: finding, assessing, ranking and tracking fixes.
• Scan servers, endpoints, cloud environments, network devices, containers and applications on a regular basis.
• Review scan output, confirm real issues and filter out false positives so remediation work is effective.
• Work with infrastructure, cloud, application and engineering teams to get vulnerabilities fixed on time.
• Rank vulnerabilities by CVSS score, threat intelligence, ease of exploitation and business impact.
• Track new threats, zero-day flaws and security advisories, and explain to the business what they mean and what to do.
• Build metrics, dashboards and reports that show trends, fix progress and risk reduction for leadership.
• Review new technologies, infrastructure builds and cloud services for vulnerabilities before they go live.
• Maintain and manage scanning tools such as Rapid7 InsightVM, Tenable, Qualys, CrowdStrike Exposure Management or similar platforms.
• Work with application security staff to build vulnerability checks into the software development lifecycle.
• Provide evidence and reports on vulnerability controls for audits, regulatory reviews and compliance work.
• Design, build and maintain automation that speeds up vulnerability processes, lowers manual work and helps security and technology teams.
• Assess and roll out AI-driven security tools that improve vulnerability analysis, prioritisation, remediation workflows and decision-making based on data.

Requirements

• Required: 6+ years in vulnerability management, security engineering, security operations or a closely related security field.
• Required: Experience assessing vulnerabilities and coordinating fixes across infrastructure, cloud and application environments.
• Required: Hands-on use of vulnerability platforms such as Rapid7 InsightVM, Qualys, Tenable Nessus, CrowdStrike Exposure Management or equivalent tools.
• Required: Understanding of CVSS, EPSS and risk-based prioritisation methods.
• Required: Experience supporting Windows, Linux, cloud and network technologies.
• Required: Knowledge of common security weaknesses, misconfigurations and attack techniques.
• Required: Experience with AWS, Azure or Google Cloud Platform.
• Required: Familiarity with NIST, CIS Controls, PCI-DSS, ISO 27001 and SOC 2.
• Required: Experience building executive-level metrics, dashboards and risk reports.
• Preferred: Scripting and automation experience in PowerShell, Python, Bash or similar.
• Preferred: Experience sending vulnerability findings into ServiceNow, Jira or similar ticketing and workflow tools.
• Preferred: Knowledge of SAST, DAST, container security and software composition analysis.
• Preferred: Certifications such as Security+, CySA+, GSEC, GCIH, CISSP or equivalent.
• Preferred: Experience running vulnerability programmes in large enterprises with risk-based approaches.
• You will work independently on high-impact projects and bring deep vulnerability management expertise across cybersecurity and IT security.
• You need strong influence and stakeholder skills, and must explain complex technical issues clearly to non-technical people.

Conditions

Remote role, primarily working from home.

Base salary in the United States: USD 110,000 to 253,000 per year for the Michigan location.

Actual offers may differ based on location, experience, education, training or skill level.

Variable incentives may also be offered on top of base salary.

The company is an equal opportunity employer and considers qualified applicants with criminal histories as required by law.

Benefits

• Comprehensive health, financial and emotional wellbeing benefits for you and your family.
• Career development programmes to help you reach your goals, including moving into another division.
• Flexibility to manage work alongside personal needs.