Vulnerability Management Engineer I

• Validate vulnerability scan schedules across assigned networks, subnets, and regions
• Monitor scanner appliance health, assignments, configurations, failures, authentication, access, and connectivity issues
• Raise, update, and follow up on incident and remediation tickets
• Support approved ad hoc rescans and validate asset, vulnerability, and remediation details
• Update remediation tickets with scan results, CSV reports, evidence, and validation notes
• Monitor vulnerability dashboards and extract reports from ArmorCode and CrowdStrike
• Review exception requests and validate affected assets, justification, evidence, ownership, categories, and approvals
• Create and maintain approved exceptions in vulnerability management platforms
• Validate vulnerability advisories, affected assets, impacted versions, and remediation follow-up
• Review finding reassignment requests and coordinate reassignment reviews
• Support External Attack Surface Management findings, asset ownership, remediation, and owner mapping
• Follow up on critical vulnerabilities affecting external security ratings or business risk indicators
• Progressively support security configuration assessments, asset onboarding validation, security templates, tooling issues, process improvement, and automation under guidance

• Basic understanding of cybersecurity concepts, vulnerabilities, risk ratings, CVEs, remediation, and patching
• Foundational knowledge of IP addresses, subnets, ports, protocols, and network connectivity
• Basic familiarity with Windows, Linux, network devices, databases, and cloud or virtualized environments
• Ability to work with dashboards, reports, CSV exports, tickets, and documented operational procedures
• Good written communication skills for ticket updates, stakeholder follow-ups, and evidence documentation
• Attention to detail when validating asset information, vulnerability details, scan results, and exception evidence
• Willingness to learn vulnerability management platforms, IT service management tools, CMDB processes, and enterprise security workflows
• Bachelor’s degree in computer science, information technology, Cybersecurity, Electronics, or a related field preferred but not mandatory
• Cybersecurity fundamentals training or certifications such as Security+, CC, Network+, or equivalent learning exposure preferred but not mandatory
• Ability to work effectively in a remote environment with regular updates, collaboration, and disciplined time management

• Remote work arrangement
• Opportunity to grow into broader security engineering responsibilities
• Cybersecurity fundamentals training or certifications may be supported through learning exposure