Vulnerability Security Engineer

About the employer

Role overview

Responsibilities

• Perform vulnerability assessments and regular security scans across IT infrastructure, applications, cloud, and relevant OT environments.
• Prioritize vulnerabilities using severity, exploitability, asset criticality, and business impact.
• Administer scanning platforms, including configurations, schedules, asset coverage, and troubleshooting.
• Coordinate remediation with IT, security, and system owners and follow up on outstanding findings.
• Validate remediation through rescanning and other verification methods.
• Monitor vulnerabilities, security advisories, and threat intelligence; escalate critical risks when necessary.
• Maintain vulnerability dashboards, risk registers, and remediation reports for technical teams and management.
• Support risk assessments, security exceptions, audits, and process improvement.

Requirements

• 2–5 years of relevant cybersecurity experience with hands-on vulnerability assessment and management exposure.
• Bachelor's degree in cybersecurity, IT, computer science, or a related field.
• Practical experience with Tenable Nessus, Qualys, Rapid7, or Microsoft Defender Vulnerability Management scanning tools.
• Knowledge of vulnerability management, CVE/CVSS scoring, risk prioritization, and remediation tracking.
• Knowledge of IT infrastructure, networking, Windows/Linux systems, and common security vulnerabilities.
• Familiarity with ISO 27001, NIST CSF, or CIS Controls.
• Cloud security, scripting/automation, or OT/ICS exposure is an advantage.
• CompTIA Security+, CySA+, CEH, or equivalent certification is an advantage.

Why join

• The employer describes a personalized onboarding and career follow-up, training and mobility opportunities, supportive management, and recognition of employee performance.
• The employer highlights shared achievements, environmental and community responsibility, and employee health and safety.