Engineer

WE ARE HIRING: L3 Vulnerability Management (VAVM) Engineer / Senior Analyst

We are looking for a Lead/L3 Vulnerability Assessment & Vulnerability Management (VAVM) Engineer to join our team and spearhead our global risk-reduction strategies across on-prem, multi-cloud, and containerized environments.

This isn't an entry-level "scan-and-report" job. As our L3 technical authority, you will design the vulnerability lifecycle, build custom automation pipelines, lead zero-day emergency responses, and bridge the gap between technical infrastructure teams and executive leadership.

The Tech Stack & Ecosystem Youll Manage

• Core Tools: Qualys VMDR, Rapid7 InsightVM, Wiz
• Environments: Hybrid Infrastructure, Multi-Cloud (AWS, Azure, GCP), and Kubernetes/Containers
• Integrations & Automation: Python, PowerShell, Bash, REST APIs, ServiceNow, Jira, and SIEM platforms

What Youll Do (Key Responsibilities)

• Lead & Prioritize: Move beyond raw CVSS scores. Youll use threat intelligence, asset criticality, and active exploitation data to build smart, risk-based remediation strategies.
• Drive Automation: Build the connective tissue between our scanning tools and ticketing systems to drastically reduce our Mean Time to Remediate (MTTR).
• Cloud & Container Security: Partner with Cloud Ops to audit security postures, eliminate misconfigurations, and secure container workflows.
• Orchestrate Governance: Review and approve risk exceptions, establish realistic SLAs, and serve as the final escalation point for complex technical findings.
• Mentor & Influence: Guide L1/L2 analysts to elevate team capabilities, and translate complex risk metrics into clean, actionable dashboards for leadership.

What We Are Looking For

• Experience: 8-10+ years dedicated strictly to enterprise Vulnerability Management (ideally managing scale of 10,000+ assets).
• Cloud Fluency: Proven experience managing vulnerabilities in cloud-native and containerized environments.
• Scripting Chops: Ability to write scripts (Python/Bash/PowerShell) to query APIs and automate repetitive tasks.
• Certifications (Highly Valued): CISSP, GCVA, CEH, or Cloud Security Specialties (AWS/Azure).