Senior Vulnerability Management Engineer

▶︎ Job Details
・Job Title: Senior Vulnerability Management Engineer
・Client: Japanese Global Automotive Group / Cybersecurity Division
・Working Location: Plano, TX
・Employment Type : Contract 
・Visa Support: No
・Working Hours: Standard Business Hours (CST)
・Language: English Fluent

▶︎ Key Responsibilities

• Own vulnerability findings from identification and technical triage through remediation, validation, and closure.
• Analyze vulnerability data using CVE, CVSS, CISA KEV, EPSS, threat intelligence, exploitability, exposure, and business impact.
• Investigate findings to determine applicability, severity, root cause, ownership, and organizational risk.
• Identify false positives, duplicate findings, accepted risks, compensating controls, and exception cases.
• Partner with infrastructure, application, cloud, security, and business teams to drive remediation efforts.
• Track vulnerabilities against remediation timelines and SLAs, escalating overdue or critical issues when necessary.
• Provide technical guidance, remediation recommendations, and mitigation strategies to stakeholders.
• Validate remediation through rescans, manual reviews, testing, and supporting evidence.
• Operate and optimize enterprise vulnerability management platforms such as Qualys VMDR, Tenable, Rapid7, or similar tools.
• Maintain asset inventories, tagging, scan coverage, dashboards, reporting, and data accuracy within vulnerability platforms.
• Develop risk-based metrics and reporting on vulnerability trends, remediation effectiveness, aging, and recurring weaknesses.
• Collaborate with Asset Management, Security Operations, Threat Intelligence, Governance, Cloud, and Infrastructure teams.
• Maintain vulnerability management procedures, playbooks, and supporting documentation.
• Identify opportunities for automation and continuous improvement of vulnerability management processes.
• Provide technical mentorship and guidance to junior security team members.

▶︎ The Right Candidate Will Possess

• Hands-on experience managing the complete vulnerability lifecycle in enterprise environments.
• Strong analytical skills with the ability to prioritize risk beyond CVSS scores.
• Deep understanding of vulnerability assessment, remediation strategies, and security best practices.
• Ability to communicate technical findings clearly to both technical and non-technical stakeholders.
• Experience working across infrastructure, cloud, application, and security teams.
• Strong ownership mindset and ability to independently drive remediation efforts.
• Experience operating vulnerability management platforms and managing large volumes of findings.
• Passion for cybersecurity, threat intelligence, risk management, and continuous improvement.

▶︎ Required Qualifications & Skills

• 4-8 years of hands-on experience in Vulnerability Management, Security Engineering, Infrastructure Security, or related cybersecurity disciplines.
• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Business, or a related field (or equivalent experience).
• Demonstrated experience owning vulnerabilities through identification, triage, prioritization, remediation, validation, and closure.
• Strong hands-on experience with Qualys VMDR, Tenable, Rapid7, or equivalent enterprise vulnerability management platforms.
• Strong knowledge of CVE, CVSS, CPE, vulnerability prioritization, exploitability analysis, compensating controls, and risk acceptance processes.
• Ability to independently assess scanner findings and determine appropriate remediation actions.
• Experience managing high-volume vulnerability programs in complex enterprise environments.
• Experience coordinating remediation efforts across multiple technical and business teams.
• Experience validating remediation through rescanning, evidence assessment, testing, or manual review.
• Strong working knowledge of Windows, Linux, networking, databases, middleware, virtualization, and cloud environments.
• Understanding of patch management, configuration hardening, software upgrades, compensating controls, and system remediation practices.
• Excellent communication, documentation, troubleshooting, prioritization, and stakeholder management skills.

▶︎ Preferred Qualifications

• Advanced experience with Qualys VMDR including asset inventory, tagging, dashboards, authentication, reporting, and agent-based assessments.
• Experience with Attack Surface Management (ASM) or External Exposure Management technologies.
• Experience supporting AWS, Microsoft Azure, or Google Cloud Platform environments.
• Experience integrating vulnerability management solutions with ServiceNow, Jira, SIEM, SOAR, CMDB, or Asset Management platforms.
• Experience with Splunk, Microsoft Sentinel, Power BI, or similar enterprise technologies.
• Knowledge of CISA KEV, EPSS, threat intelligence, and exploit intelligence sources.
• Scripting and automation experience using Python, PowerShell, APIs, or similar technologies.
• Experience supporting remediation SLAs, governance processes, risk exception management, and security frameworks.
• Relevant certifications such as Security+, CISSP, GIAC, Qualys Certifications, or equivalent industry credentials.

No C2C: We do not accept Corp-to-Corp (C2C) arrangements for this position.