Senior Vulnerability Management Engineer
Read straight from Cinter Career's careers page, verified 4d ago.Seekless can tailor your résumé to it.
Seekless can write your résumé for this posting first.
Before you apply
LocationPlano, TX
Work modeon-site
Typecontract
SenioritySenior
Experience4–8 yrs
Company size34+ people
First seenOct 30, 2026 · 4d ago
Verified live4d ago
At a glanceSummarised by Seekless from the posting.
4-8 years of hands-on experience in Vulnerability Management, Security Engineering, Infrastructure Security, or related cybersecurity disciplines
Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Business, or a related field (or equivalent experience)
Demonstrated experience owning vulnerabilities through identification, triage, prioritization, remediation, validation, and closure
Strong hands-on experience with Qualys VMDR, Tenable, Rapid7, or equivalent enterprise vulnerability management platforms
Strong knowledge of CVE, CVSS, CPE, vulnerability prioritization, exploitability analysis, compensating controls, and risk acceptance processes
Ability to independently assess scanner findings and determine appropriate remediation actions
Experience managing high-volume vulnerability programs in complex enterprise environments
Experience coordinating remediation efforts across multiple technical and business teams
Experience validating remediation through rescanning, evidence assessment, testing, or manual review
Strong working knowledge of Windows, Linux, networking, databases, middleware, virtualization, and cloud environments
Understanding of patch management, configuration hardening, software upgrades, compensating controls, and system remediation practices
Excellent communication, documentation, troubleshooting, prioritization, and stakeholder management skills
Advanced experience with Qualys VMDR including asset inventory, tagging, dashboards, authentication, reporting, and agent-based assessments
Experience with Attack Surface Management (ASM) or External Exposure Management technologies
Experience supporting AWS, Microsoft Azure, or Google Cloud Platform environments
Experience integrating vulnerability management solutions with ServiceNow, Jira, SIEM, SOAR, CMDB, or Asset Management platforms
Experience with Splunk, Microsoft Sentinel, Power BI, or similar enterprise technologies
Knowledge of CISA KEV, EPSS, threat intelligence, and exploit intelligence sources
Scripting and automation experience using Python, PowerShell, APIs, or similar technologies
Experience supporting remediation SLAs, governance processes, risk exception management, and security frameworks
Relevant certifications such as Security+, CISSP, GIAC, Qualys Certifications, or equivalent industry credentials
No C2C: We do not accept Corp-to-Corp (C2C) arrangements for this position
Skills
Qualys VMDR
Tenable
Rapid7
AWS
Microsoft Azure
Google Cloud Platform
ServiceNow
Jira
Splunk
Microsoft Sentinel
Power BI
Python
PowerShell
APIs
Windows
Linux
CVE
CVSS
CPE
About the role
▶︎ Job Details・Job Title: Senior Vulnerability Management Engineer
・Client: Japanese Global Automotive Group / Cybersecurity Division
・Working Location: Plano, TX
・Employment Type : Contract
・Visa Support: No
・Working Hours: Standard Business Hours (CST)
・Language: English Fluent
Responsibilities
▶︎ Key Responsibilities
•
Own vulnerability findings from identification and technical triage through remediation, validation, and closure.
•
Analyze vulnerability data using CVE, CVSS, CISA KEV, EPSS, threat intelligence, exploitability, exposure, and business impact.
•
Investigate findings to determine applicability, severity, root cause, ownership, and organizational risk.
•
Identify false positives, duplicate findings, accepted risks, compensating controls, and exception cases.
•
Partner with infrastructure, application, cloud, security, and business teams to drive remediation efforts.
•
Track vulnerabilities against remediation timelines and SLAs, escalating overdue or critical issues when necessary.
•
Provide technical guidance, remediation recommendations, and mitigation strategies to stakeholders.
•
Validate remediation through rescans, manual reviews, testing, and supporting evidence.
•
Operate and optimize enterprise vulnerability management platforms such as Qualys VMDR, Tenable, Rapid7, or similar tools.
•
Maintain asset inventories, tagging, scan coverage, dashboards, reporting, and data accuracy within vulnerability platforms.
•
Develop risk-based metrics and reporting on vulnerability trends, remediation effectiveness, aging, and recurring weaknesses.
•
Collaborate with Asset Management, Security Operations, Threat Intelligence, Governance, Cloud, and Infrastructure teams.
•
Maintain vulnerability management procedures, playbooks, and supporting documentation.
•
Identify opportunities for automation and continuous improvement of vulnerability management processes.
•
Provide technical mentorship and guidance to junior security team members.
Requirements
▶︎ The Right Candidate Will Possess
•
Hands-on experience managing the complete vulnerability lifecycle in enterprise environments.
•
Strong analytical skills with the ability to prioritize risk beyond CVSS scores.
•
Deep understanding of vulnerability assessment, remediation strategies, and security best practices.
•
Ability to communicate technical findings clearly to both technical and non-technical stakeholders.
•
Experience working across infrastructure, cloud, application, and security teams.
•
Strong ownership mindset and ability to independently drive remediation efforts.
•
Experience operating vulnerability management platforms and managing large volumes of findings.
•
Passion for cybersecurity, threat intelligence, risk management, and continuous improvement.
▶︎ Required Qualifications & Skills
•
4-8 years of hands-on experience in Vulnerability Management, Security Engineering, Infrastructure Security, or related cybersecurity disciplines.
•
Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Business, or a related field (or equivalent experience).
•
Demonstrated experience owning vulnerabilities through identification, triage, prioritization, remediation, validation, and closure.
•
Strong hands-on experience with Qualys VMDR, Tenable, Rapid7, or equivalent enterprise vulnerability management platforms.
•
Strong knowledge of CVE, CVSS, CPE, vulnerability prioritization, exploitability analysis, compensating controls, and risk acceptance processes.
•
Ability to independently assess scanner findings and determine appropriate remediation actions.
•
Experience managing high-volume vulnerability programs in complex enterprise environments.
•
Experience coordinating remediation efforts across multiple technical and business teams.
•
Experience validating remediation through rescanning, evidence assessment, testing, or manual review.
•
Strong working knowledge of Windows, Linux, networking, databases, middleware, virtualization, and cloud environments.
•
Understanding of patch management, configuration hardening, software upgrades, compensating controls, and system remediation practices.
•
Excellent communication, documentation, troubleshooting, prioritization, and stakeholder management skills.
Nice to have
▶︎ Preferred Qualifications
•
Advanced experience with Qualys VMDR including asset inventory, tagging, dashboards, authentication, reporting, and agent-based assessments.
•
Experience with Attack Surface Management (ASM) or External Exposure Management technologies.
•
Experience supporting AWS, Microsoft Azure, or Google Cloud Platform environments.
•
Experience integrating vulnerability management solutions with ServiceNow, Jira, SIEM, SOAR, CMDB, or Asset Management platforms.
•
Experience with Splunk, Microsoft Sentinel, Power BI, or similar enterprise technologies.
•
Knowledge of CISA KEV, EPSS, threat intelligence, and exploit intelligence sources.
•
Scripting and automation experience using Python, PowerShell, APIs, or similar technologies.
•
Experience supporting remediation SLAs, governance processes, risk exception management, and security frameworks.
•
Relevant certifications such as Security+, CISSP, GIAC, Qualys Certifications, or equivalent industry credentials.
No C2C: We do not accept Corp-to-Corp (C2C) arrangements for this position.