Senior Vulnerability Management Engineer

• ︎ Job Details ・Job Title: Senior Vulnerability Management Engineer ・Client: Japanese Global Automotive Group / Cybersecurity Division ・Working Location: Plano, TX ・Employment Type : Contract ・Visa Support: No ・Working Hours: Standard Business Hours (CST) ・Language: English Fluent
• ︎ Key Responsibilities Own vulnerability findings from identification and technical triage through remediation, validation, and closure. Analyze vulnerability data using CVE, CVSS, CISA KEV, EPSS, threat intelligence, exploitability, exposure, and business impact. Investigate findings to determine applicability, severity, root cause, ownership, and organizational risk. Identify false positives, duplicate findings, accepted risks, compensating controls, and exception cases. Partner with infrastructure, application, cloud, security, and business teams to drive remediation efforts. Track vulnerabilities against remediation timelines and SLAs, escalating overdue or critical issues when necessary. Provide technical guidance, remediation recommendations, and mitigation strategies to stakeholders. Validate remediation through rescans, manual reviews, testing, and supporting evidence. Operate and optimize enterprise vulnerability management platforms such as Qualys VMDR, Tenable, Rapid7, or similar tools. Maintain asset inventories, tagging, scan coverage, dashboards, reporting, and data accuracy within vulnerability platforms. Develop risk-based metrics and reporting on vulnerability trends, remediation effectiveness, aging, and recurring weaknesses. Collaborate with Asset Management, Security Operations, Threat Intelligence, Governance, Cloud, and Infrastructure teams. Maintain vulnerability management procedures, playbooks, and supporting documentation. Identify opportunities for automation and continuous improvement of vulnerability management processes. Provide technical mentorship and guidance to junior security team members.
• ︎ The Right Candidate Will Possess Hands-on experience managing the complete vulnerability lifecycle in enterprise environments. Strong analytical skills with the ability to prioritize risk beyond CVSS scores. Deep understanding of vulnerability assessment, remediation strategies, and security best practices. Ability to communicate technical findings clearly to both technical and non-technical stakeholders. Experience working across infrastructure, cloud, application, and security teams. Strong ownership mindset and ability to independently drive remediation efforts. Experience operating vulnerability management platforms and managing large volumes of findings. Passion for cybersecurity, threat intelligence, risk management, and continuous improvement.
• ︎ Required Qualifications & Skills 4-8 years of hands-on experience in Vulnerability Management, Security Engineering, Infrastructure Security, or related cybersecurity disciplines. Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Business, or a related field (or equivalent experience). Demonstrated experience owning vulnerabilities through identification, triage, prioritization, remediation, validation, and closure. Strong hands-on experience with Qualys VMDR, Tenable, Rapid7, or equivalent enterprise vulnerability management platforms. Strong knowledge of CVE, CVSS, CPE, vulnerability prioritization, exploitability analysis, compensating controls, and risk acceptance processes. Ability to independently assess scanner findings and determine appropriate remediation actions. Experience managing high-volume vulnerability programs in complex enterprise environments. Experience coordinating remediation efforts across multiple technical and business teams. Experience validating remediation through rescanning, evidence assessment, testing, or manual review. Strong working knowledge of Windows, Linux, networking, databases, middleware, virtualization, and cloud environments. Understanding of patch management, configuration hardening, software upgrades, compensating controls, and system remediation practices. Excellent communication, documentation, troubleshooting, prioritization, and stakeholder management skills.
• ︎ Preferred Qualifications Advanced experience with Qualys VMDR including asset inventory, tagging, dashboards, authentication, reporting, and agent-based assessments. Experience with Attack Surface Management (ASM) or External Exposure Management technologies. Experience supporting AWS, Microsoft Azure, or Google Cloud Platform environments. Experience integrating vulnerability management solutions with ServiceNow, Jira, SIEM, SOAR, CMDB, or Asset Management platforms. Experience with Splunk, Microsoft Sentinel, Power BI, or similar enterprise technologies. Knowledge of CISA KEV, EPSS, threat intelligence, and exploit intelligence sources. Scripting and automation experience using Python, PowerShell, APIs, or similar technologies. Experience supporting remediation SLAs, governance processes, risk exception management, and security frameworks. Relevant certifications such as Security+, CISSP, GIAC, Qualys Certifications, or equivalent industry credentials.

No C2C

We do not accept Corp-to-Corp (C2C) arrangements for this position.