Security Engineer II - Threat & Vulnerability Management

Responsibilities: Own and evolve the enterprise Vulnerability Management Program across the IT environment Manage end‑to‑end vulnerability lifecycle: discovery, validation, risk prioritization, remediation tracking, exception management, verification, reporting Provide strategic threat intelligence to inform prioritization and business decisions Operate and optimize vulnerability assessment technologies for comprehensive asset coverage and actionable risk visibility Correlate findings across VM platforms, attack surface management, and threat intel sources Apply risk‑based prioritization using CVSS, KEV, exploitability, asset criticality, exposure, and business impact Collaborate with asset management and technology teams to improve asset inventory accuracy and risk visibility Design, develop, and maintain security automation to streamline vulnerability management and security operations Build and enhance integrations, workflows, and tooling to automate tasks and scale operations Coordinate remediation across infra, apps, cloud, and network to meet SLAs and risk severity Lead response for critical vulnerabilities and zero‑days, including rapid assessment and risk communication Manage vulnerability exceptions, compensating controls, risk acceptance, and periodic reviews Develop and maintain vulnerability policies, standards, runbooks, and reporting frameworks Develop executive and operational metrics to measure risk reduction, remediation performance, trends, and MTTR Support audits and compliance through documentation and evidence collection Monitor emerging vulnerabilities, trends, and best practices to improve prioritization

Key requirements: 3+ years in enterprise vulnerability management across on‑prem, cloud, and hybrid environments Hands‑on with vulnerability management platforms (Tenable, Qualys, Rapid7, Microsoft Defender VM) and associated practices Strong understanding of CVE, CVSS, CISA KEV, exploit intelligence, attack surface management, and risk‑based decision making Experience securing Azure, AWS, and GCP environments; containerized workloads Preferred certifications: CISSP, CySA+, GCVA, GSEC, GCSA, GCTI, OSCP Bachelor’s degree in a related field or equivalent professional experience collaboration across technical and business teams effective risk communication problem solving and process improvement vulnerability management platforms (Tenable, Qualys, Rapid7, Defender VM) threat intelligence and risk prioritization (CVE, CVSS, KEV) automation and integrations for security tooling