Exposure Analyst - App & Code

Required Skills & Experience

• 3+ years in cybersecurity with experience in vulnerability management, cloud security, infrastructure security, or security operations.
• Experience working with enterprise vulnerability management tools and processes. Strong understanding of vulnerability identification, prioritization, remediation, and validation practices.
• Strong analytical, troubleshooting, and communication skills.
• Experience working collaboratively across multiple technical teams.

Nice to Have Skills & Experience

• Experience with ASM/CAASM, SOAR, and Exposure Management platforms as well as Enterprise Vulnerability Management tools (e.g., Qualys, Wiz, Defender, Armis, Swimlane VRM, Elastic).
• Familiarity with NIST, CIS frameworks, and regulatory requirements.
• Experience supporting enterprise vulnerability remediation programs.

Job Description

The Vulnerability Engineer is responsible for supporting the enterprise vulnerability management program through vulnerability identification, validation, prioritization, remediation coordination, reporting, and automation activities. This role works closely with infrastructure, application, cloud, data, and connected device teams to reduce organizational risk through effective vulnerability management practices. The position serves as a technical contributor responsible for operational execution and continuous improvement of vulnerability management processes. ________________________________________ Position Responsibilities Vulnerability Analysis & Risk Prioritization

• Analyze and validate vulnerability findings from multiple security platforms.
• Support risk-based vulnerability prioritization by leveraging vulnerability intelligence (VM, ASM, CTEM) into risk-prioritized, actionable remediation activities.
• Validate data quality and eliminate false positives.
• Perform trend analysis to identify recurring risks and remediation opportunities.
• Support vulnerability exceptions and risk acceptance processes. ________________________________________ Remediation Execution & Coordination
• Coordinate remediation efforts across infrastructure, application, cloud, and platform teams.
• Track remediation progress against established SLAs and escalation criteria.
• Provide remediation guidance and technical recommendations to system owners.
• Verify remediation completion through rescanning and validation activities.
• Support creation of actionable tickets through ServiceNow, Azure DevOps Boards, and GitHub Issues. ________________________________________ Program Operations & Governance
• Execute vulnerability scanning, validation, triage, and operational processes.
• Develop and maintain documentation, standards, procedures, and knowledge articles supporting the vulnerability lifecycle.
• Ensure alignment with audit, compliance, and regulatory requirements.
• Assist with management of vulnerability exceptions and risk register entries. ________________________________________ Reporting & Metrics
• Develop and maintain vulnerability reports and dashboards.
• Track metrics such as vulnerability aging, remediation performance, and SLA adherence.
• Support executive and operational reporting requirements.
• Validate reporting accuracy and data quality. ________________________________________ Automation & Tooling
• Contribute to optimization of vulnerability management platforms.
• Support automation initiatives for vulnerability ingestion, prioritization, and remediation workflows.
• Improve integration and data quality within CMDB and exposure management systems. ________________________________________ Technical Collaboration & Stakeholder Engagement
• Serve as SME for vulnerability management activities.
• Collaborate with Security Architecture, Security Engineering, GRC, Infrastructure, Application, Data and Connected Device teams.
• Communicate technical risks and remediation requirements to technical and business stakeholders.
• Remain current on emerging threats, vulnerabilities, exploit techniques, and industry best practices.