Vulnerability Management Engineer

This position offers a hybrid work option. Nelnet values flexibility and understands the importance of work-life integration. Our hybrid work environment allows associates Living within 30 miles of an office location to work remotely for part of the week, while also fostering collaboration and team connection through in-office presence three days per week.

JOB RESPONSIBILITIES:

• Lead the design, development, and continuous improvement of the organization’s vulnerability management strategy, aligning with business objectives and security requirements. • Stay up to date on emerging security threats and vulnerabilities, and ensure the program adapts accordingly. • Oversee the configuration and maintenance of vulnerability scanning tools. • Analyze vulnerability data to assess risk and recommend appropriate mitigation strategies. • Develop and implement vulnerability remediation plans, working collaboratively with all technology teams and the business. • Collaborate with cross-functional teams to assess vulnerability risks, prioritize remediation efforts, and ensure timely resolution of critical vulnerabilities to minimize security risks and operational impact. • Knowledge of CIS benchmarks, DISA STIGs, NSA Hardening Guides, and other industry security frameworks. • Demonstrated passion for continuous learning.
• EDUCATION:
• Bachelor’s degree in cyber security or information systems OR relevant work experience.
• Cyber Security related certifications such as GIAC GSEC, GCED, GEVA, CompTIA Security+, CySA+, ISC2 CISSP are a plus.
• EXPERIENCE:
• 2+ years of experience in vulnerability management and/or security operations. • Experience with Vulnerability management solutions (Rapid 7, Qualys, Tenable, etc.) • Experience with patching tools like Microsoft MECM. • Experience with EDR administration (Microsoft Windows Defender, CrowdStrike Falcon, VMware Carbon Black, Palo Alto Network Cortex XDR, Tanium etc.) • Solid understanding of cloud-based hosting platforms, with background on security threats deriving from Azure, AWS and GCP hosted services being preferred. • Partner with the SOC, Cyber Threat Intel, Offensive Security Team, and other stakeholders to refine prioritization, to validate impact of suspected vulnerabilities, to advise owners on mitigation strategies or compensating controls, and to provide accurate & timely reporting that informs remediation progress.
• Knowledge of python programming language is required.
• Pay range for this role is $75,000-$125,000 annually, depending on experience.
• #LI-CW1
• #LI-Remote
• Our benefits package includes medical, dental, vision, HSA and FSA, generous earned time off, 401K/student loan repayment, life insurance & AD&D insurance, employee assistance program, employee stock purchase program, tuition reimbursement, performance-based incentive pay, short- and long-term disability, and a robust wellness program. Click here to learn more about our benefits: Benefits & Perks - Nelnet Inc.
• Nelnet is committed to providing a welcoming and respectful workplace where all associates have the opportunity to succeed. As an Equal Opportunity Employer, we ensure that all qualified applicants are considered for employment. Employment decisions are made without regard to race, color, religion/creed, national origin, gender, sex, marital status, age, disability, use of a guide dog or service animal, sexual orientation, military/veteran status, or any other status protected by federal, state, or local law. We value the unique contributions of every team member and believe that a positive work environment benefits everyone.
• Qualified individuals with disabilities who require reasonable accommodations in order to apply or compete for positions at Nelnet may request such accommodations by contacting Corporate Recruiting at 402-486-5725 or [email protected].
• Nelnet is a Drug Free and Tobacco Free Workplace.
• Use of Artificial Intelligence in Hiring
• We may use automated or artificial intelligence enabled tools to assist with the initial review of applications, such as identifying relevant skills or experience. These tools are used to support human review and do not make hiring decisions. A recruiter reviews applications and determines which candidates move forward in the hiring process. For more information, see our Privacy Policy and Pre-Use Notice: Automated Tools in Hiring
• Lead the design, development, and continuous improvement of the organization’s vulnerability management strategy, aligning with business objectives and security requirements.
• Stay up to date on emerging security threats and vulnerabilities, and ensure the program adapts accordingly.
• Oversee the configuration and maintenance of vulnerability scanning tools.
• Analyze vulnerability data to assess risk and recommend appropriate mitigation strategies.
• Develop and implement vulnerability remediation plans, working collaboratively with all technology teams and the business.
• Collaborate with cross-functional teams to assess vulnerability risks, prioritize remediation efforts, and ensure timely resolution of critical vulnerabilities to minimize security risks and operational impact.
• Knowledge of CIS benchmarks, DISA STIGs, NSA Hardening Guides, and other industry security frameworks.
• Demonstrated passion for continuous learning.

Qualifications

• 2+ years of experience in vulnerability management and/or security operations.
• Experience with Vulnerability management solutions (Rapid 7, Qualys, Tenable, etc.)
• Experience with patching tools like Microsoft MECM.
• Experience with EDR administration (Microsoft Windows Defender, CrowdStrike Falcon, VMware Carbon Black, Palo Alto Network Cortex XDR, Tanium etc.)
• Solid understanding of cloud-based hosting platforms, with background on security threats deriving from Azure, AWS and GCP hosted services being preferred.
• Partner with the SOC, Cyber Threat Intel, Offensive Security Team, and other stakeholders to refine prioritization, to validate impact of suspected vulnerabilities, to advise owners on mitigation strategies or compensating controls, and to provide accurate & timely reporting that informs remediation progress.
• Knowledge of python programming language is required.
• Pay range for this role is $75,000-$125,000 annually, depending on experience.
• #LI-CW1
• #LI-Remote
• Our benefits package includes medical, dental, vision, HSA and FSA, generous earned time off, 401K/student loan repayment, life insurance & AD&D insurance, employee assistance program, employee stock purchase program, tuition reimbursement, performance-based incentive pay, short- and long-term disability, and a robust wellness program. Click here to learn more about our benefits: Benefits & Perks - Nelnet Inc.
• Nelnet is committed to providing a welcoming and respectful workplace where all associates have the opportunity to succeed. As an Equal Opportunity Employer, we ensure that all qualified applicants are considered for employment. Employment decisions are made without regard to race, color, religion/creed, national origin, gender, sex, marital status, age, disability, use of a guide dog or service animal, sexual orientation, military/veteran status, or any other status protected by federal, state, or local law. We value the unique contributions of every team member and believe that a positive work environment benefits everyone.
• Qualified individuals with disabilities who require reasonable accommodations in order to apply or compete for positions at Nelnet may request such accommodations by contacting Corporate Recruiting at 402-486-5725 or [email protected].
• Nelnet is a Drug Free and Tobacco Free Workplace.
• Use of Artificial Intelligence in Hiring
• We may use automated or artificial intelligence enabled tools to assist with the initial review of applications, such as identifying relevant skills or experience. These tools are used to support human review and do not make hiring decisions. A recruiter reviews applications and determines which candidates move forward in the hiring process. For more information, see our Privacy Policy and Pre-Use Notice: Automated Tools in Hiring