Vulnerability Engineer Remote

Vulnerability Engineer

Remote – Fully Remote.

Fulltime.

$90K-$110K+ benefits.

Familiarity with vulnerability scanning platforms and a solid understanding of network fundamentals (firewalls, authentication, encryption), CVE/CVSS concepts, zero‑day vulnerabilities, and threat exposure. Strong hands‑on experience administering Windows Server and Linux Server environments.

• Identify, analyze, prioritize, and remediate security vulnerabilities across Windows and Linux server environments.
• Review weekly/biweekly scan reports with the ITVM team, validate findings, and translate them into actionable remediation tasks.
• Prepare detailed remediation plans, including impact assessments, risk evaluations, timelines, and required resource coordination.
• Execute configuration hardening and apply vendor fix packs on middleware technologies such as JBoss, Tomcat, IBM Client, and Web Sphere.
• Ensure all remediation activities follow structured change‑management processes to maintain system stability and prevent service disruptions.
• Coordinate with cross‑functional teams (application, infrastructure, and security) to ensure smooth implementation and validation of remediation activities.
• Maintain comprehensive documentation for all remediation activities, configurations, approvals, and compliance requirements.
• Monitor and prioritize high‑severity vulnerabilities to meet organizational security SLAs and regulatory expectations.
• Manage clear communication across email distribution lists, Teams channels, and ITSM platforms (Service Now) to streamline collaboration and track vulnerability closure.
• Utilize vendor support IDs to download patches, engage vendor support, and resolve complex middleware remediation issues.
• Develop and maintain scripting solutions (Power Shell, Bash, Python optional) to support vulnerability management processes.
• Contribute to continuous improvement of vulnerability management processes through analysis, feedback, and proactive security hardening.

• Proficiency in Windows Server and Linux Server administration.

• Hands‑on experience with vulnerability scanning tools and middleware platforms.

• Strong understanding of network security fundamentals, CVE/CVSS, and threat assessment.

• Ability to develop and apply remediation plans across mixed environments.