About the role
▶︎ Job Details ・Job Title: Senior Vulnerability Management Engineer ・Client: Japanese Global Automotive Group / Cybersecurity Division ・Working Location: Plano, TX ・Employment Type : Contract ・Visa Support: No ・Working Hours: Standard Business Hours (CST) ・Language: English Fluent
▶︎ Key Responsibilities * Own vulnerability findings from identification and technical triage through remediation, validation, and closure. * Analyze vulnerability data using CVE, CVSS, CISA KEV, EPSS, threat intelligence, exploitability, exposure, and business impact. * Investigate findings to determine applicability, severity, root cause, ownership, and organizational risk. * Identify false positives, duplicate findings, accepted risks, compensating controls, and exception cases. * Partner with infrastructure, application, cloud, security, and business teams to drive remediation efforts. * Track vulnerabilities against remediation timelines and SLAs, escalating overdue or critical issues when necessary. * Provide technical guidance, remediation recommendations, and mitigation strategies to stakeholders. * Validate remediation through rescans, manual reviews, testing, and supporting evidence. * Operate and optimize enterprise vulnerability management platforms such as Qualys VMDR, Tenable, Rapid7, or similar tools. * Maintain asset inventories, tagging, scan coverage, dashboards, reporting, and data accuracy within vulnerability platforms. * Develop risk-based metrics and reporting on vulnerability trends, remediation effectiveness, aging, and recurring weaknesses. * Collaborate with Asset Management, Security Operations, Threat Intelligence, Governance, Cloud, and Infrastructure teams. * Maintain vulnerability management procedures, playbooks, and supporting documentation. * Identify opportunities for automation and continuous improvement of vulnerability management processes. * Provide technical mentorship and guidance to junior security team members.
▶︎ The Right Candidate Will Possess * Hands-on experience managing the complete vulnerability lifecycle in enterprise environments. * Strong analytical skills with the ability to prioritize risk beyond CVSS scores. * Deep understanding of vulnerability assessment, remediation strategies, and security best practices. * Ability to communicate technical findings clearly to both technical and non-technical stakeholders. * Experience working across infrastructure, cloud, application, and security teams. * Strong ownership mindset and ability to independently drive remediation efforts. * Experience operating vulnerability management platforms and managing large volumes of findings. * Passion for cybersecurity, threat intelligence, risk management, and continuous improvement.
▶︎ Required Qualifications & Skills * 4-8 years of hands-on experience in Vulnerability Management, Security Engineering, Infrastructure Security, or related cybersecurity disciplines. * Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Business, or a related field (or equivalent experience). * Demonstrated experience owning vulnerabilities through identification, triage, prioritization, remediation, validation, and closure. * Strong hands-on experience with Qualys VMDR, Tenable, Rapid7, or equivalent enterprise vulnerability management platforms. * Strong knowledge of CVE, CVSS, CPE, vulnerability prioritization, exploitability analysis, compensating controls, and risk acceptance processes. * Ability to independently assess scanner findings and determine appropriate remediation actions. * Experience managing high-volume vulnerability programs in complex enterprise environments. * Experience coordinating remediation efforts across multiple technical and business teams. * Experience validating remediation through rescanning, evidence assessment, testing, or manual review. * Strong working knowledge of Windows, Linux, networking, databases, middleware, virtualization, and cloud environments. * Understanding of patch management, configuration hardening, software upgrades, compensating controls, and system remediation practices. * Excellent communication, documentation, troubleshooting, prioritization, and stakeholder management skills.
▶︎ Preferred Qualifications * Advanced experience with Qualys VMDR including asset inventory, tagging, dashboards, authentication, reporting, and agent-based assessments. * Experience with Attack Surface Management (ASM) or External Exposure Management technologies. * Experience supporting AWS, Microsoft Azure, or Google Cloud Platform environments. * Experience integrating vulnerability management solutions with ServiceNow, Jira, SIEM, SOAR, CMDB, or Asset Management platforms. * Experience with Splunk, Microsoft Sentinel, Power BI, or similar enterprise technologies. * Knowledge of CISA KEV, EPSS, threat intelligence, and exploit intelligence sources. * Scripting and automation experience using Python, PowerShell, APIs, or similar technologies. * Experience supporting remediation SLAs, governance processes, risk exception management, and security frameworks. * Relevant certifications such as Security+, CISSP, GIAC, Qualys Certifications, or equivalent industry credentials.
No C2C: We do not accept Corp-to-Corp (C2C) arrangements for this position.