Threat and Vulnerability Management Engineer

Required Skills & Experience

• 5-7+ Professional experience in Information Security with hands-on threat and vulnerability management responsibility in enterprise environments.
• Experience maturing vulnerability management programs including discovery, prioritization, remediation tracking, exception handling, and executive reporting
• Hands-on cloud security experience including vulnerability assessments, misconfiguration analysis, exposure reviews, and remediation coordination.
• Container security experience including image scanning, runtime risk assessment, and vulnerability remediation
• Strong automation and scripting capabilities
• Strong understanding of vulnerability severity, exploitability, asset criticality, attack paths, and risk-based remediation
• Experience validating findings, identifying false positives, and providing remediation guidance
• Ability to drive remediation efforts across technical stakeholders in a global environment.
• Excellent written and verbal English communication skills. High ethical standards

Nice to Have Skills & Experience

• Experience improving container and cloud vulnerability coverage through integrations and process enhancements.
• Experience building dashboards, reporting metrics, and remediation trend analysis.
• Experience investigating emerging threats and vulnerability disclosures.
• Experience working in large-scale cloud-enabled environments. Strong cross-functional collaboration with infrastructure, cloud, development, and security teams

Job Description

This individual will help advance the firms vulnerability management program by identifying, prioritizing, and driving remediation of vulnerabilities across cloud, container, server, endpoint, and application environments. They will engineer automation to streamline security workflows, improve vulnerability data quality, and accelerate risk reduction efforts. The role partners closely with infrastructure, cloud, development, and security teams to translate security findings into practical remediation plans. Responsibilities also include developing risk-based prioritization methodologies, improving vulnerability scanning coverage, creating dashboards and reporting for leadership, investigating emerging threats and disclosures, coordinating response activities, and documenting standards and processes that support consistent vulnerability management throughout the technology lifecycle.