Vulnerability Engineer

Job Title: Vulnerability Engineer

Location: Erie, PA - Onsite

Duration: 12+ Months

Overview

• Seeking a skilled and Senior Vulnerability Management Engineer to join the Cybersecurity team.
• Responsible for identifying, assessing, prioritizing, and helping remediate vulnerabilities across the organization's infrastructure, applications, cloud environments, and endpoints.
• Work closely with infrastructure, application development, cloud, and security teams to reduce cyber risk and strengthen the organization's security posture.
• Play a critical role in protecting enterprise systems and sensitive customer information while supporting regulatory and compliance requirements.
• Ideal candidate should have a strong understanding of cybersecurity principles, vulnerability management programs, risk assessment methodologies, and security technologies.

Key Responsibilities

• Manage and execute the enterprise vulnerability management lifecycle, including identification, assessment, prioritization, remediation tracking, and reporting.
• Conduct regular vulnerability assessments on servers, workstations, network devices, cloud resources, databases, and applications.
• Analyze scan results and validate vulnerabilities to reduce false positives and improve remediation accuracy.
• Collaborate with IT infrastructure, cloud, development, and operations teams to prioritize and remediate security vulnerabilities.
• Develop risk-based remediation strategies using industry-standard scoring methodologies such as CVSS and threat intelligence.
• Monitor emerging threats, vulnerabilities, and security advisories to assess organizational impact.
• Support security incident investigations by identifying exploited vulnerabilities and recommending corrective actions.
• Create dashboards, reports, and metrics that communicate vulnerability trends, remediation progress, and organizational risk.
• Assist with penetration testing efforts and coordinate remediation activities resulting from security assessments.
• Implement automation and process improvements to enhance vulnerability management efficiency.
• Support security audits, regulatory assessments, and compliance initiatives.
• Maintain documentation, standards, procedures, and technical guidance related to vulnerability management.
• Partner with technology teams to integrate security best practices into system and application lifecycles.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field; equivalent experience may be considered.
• 7+ years of experience in cybersecurity, vulnerability management, security engineering, or related disciplines.
• Experience using vulnerability management platforms such as Tenable, Qualys, Rapid7, or similar solutions.
• Knowledge of operating systems including Windows, Linux, and Unix environments.
• Understanding of networking concepts, protocols, and enterprise security architectures.
• Experience assessing vulnerabilities in cloud platforms such as AWS, Azure, or Google Cloud.
• Familiarity with security frameworks and standards including NIST, CIS Controls, ISO 27001, and OWASP.
• Knowledge of patch management processes and security remediation practices.
• Strong analytical, problem-solving, and communication skills.
• Ability to explain technical risks and remediation recommendations to both technical and non-technical audiences.

Preferred Qualifications

• Industry certifications such as:
• CISSP
• GIAC (GSEC, GMON, GPEN, or similar)
• Security+
• Certified Ethical Hacker (CEH)
• Azure Security Engineer Associate
• AWS Security Specialty
• Experience with Security Information and Event Management (SIEM) platforms.
• Experience scripting or automating tasks using PowerShell, Python, Bash, or similar languages.
• Knowledge of DevSecOps practices and modern application security methodologies.
• Experience working in highly regulated industries such as insurance, financial services, or healthcare.