Vulnerability Management Engineer

Education

• Bachelors degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field.

Experience

• 4-10 years of experience in Vulnerability Management, Windows Infrastructure, Cybersecurity Operations, or Endpoint Security.
• Hands-on experience managing vulnerabilities in enterprise Windows Server and Windows desktop environments.
• Experience working with vulnerability scanning and assessment tools such as Qualys, Tenable, Rapid7, or Microsoft Defender Vulnerability Management.
• Experience coordinating remediation activities across multiple technology teams.
• Strong understanding of patch management, security compliance, and risk management processes.

Technical Skills

• Strong knowledge of Windows Server and Windows 10/11 operating systems.
• Experience with vulnerability assessment, risk prioritization, and remediation tracking.
• Familiarity with Microsoft Defender for Endpoint and Defender Vulnerability Management.
• Experience with SCCM/MECM, Microsoft Intune, and Windows patch management processes.
• Knowledge of Active Directory, Group Policy, Entra ID (Azure AD), DNS, DHCP, and Windows security configurations.
• Understanding of CVSS scoring, Common Vulnerabilities and Exposures (CVE), and security risk assessment methodologies.
• Experience reviewing security advisories from Microsoft and other vendors.
• Familiarity with security hardening standards and frameworks such as CIS Benchmarks, NIST, and ISO 27001.
• Basic scripting knowledge using PowerShell for automation, reporting, and remediation activities.
• Understanding of endpoint security, malware protection, and vulnerability lifecycle management.

Preferred Qualifications

• Microsoft Security, Compliance, and Identity certifications.
• CompTIA Security+, CySA+, or equivalent cybersecurity certification.
• Certified Information Systems Security Professional (CISSP) or Certified Ethical Hacker (CEH) (preferred but not mandatory).
• ITIL Foundation certification.
• Experience with cloud security and Azure-based environments.

Key Competencies

• Strong analytical and problem-solving skills.

• Risk-based decision-making and prioritization capabilities.

• Effective stakeholder management and cross-functional collaboration.

• Strong reporting and presentation skills.

• Attention to detail and commitment to security best practices.

• Ability to manage multiple remediation activities in a fast-paced enterprise environment.

• Proactive mindset with a focus on continuous improvement and security posture enhancement.

• Manage and support enterprise vulnerability management activities across Windows Server and Windows workstation environments.

• Perform regular vulnerability assessments using approved scanning tools (e.g., Qualys, Tenable, Rapid7, Microsoft Defender Vulnerability Management).

• Analyze vulnerability scan results, validate findings, and prioritize remediation activities based on risk, severity, and business impact.

• Coordinate with infrastructure, server, desktop, application, and security teams to ensure timely remediation of identified vulnerabilities.

• Track, monitor, and report vulnerability remediation progress against organizational SLAs and compliance requirements.

• Lead monthly vulnerability review meetings and provide recommendations for risk reduction.

• Investigate and resolve false positives, exception requests, and vulnerability-related operational issues.

• Support security audits, regulatory compliance assessments, and internal governance requirements.

• Develop remediation plans for critical and high-risk vulnerabilities affecting Windows operating systems and Microsoft technologies.

• Work closely with SCCM/MECM, Intune, and Windows Operations teams to ensure effective patch deployment and compliance management.

• Monitor emerging security threats, vulnerabilities, and vendor advisories affecting Microsoft platforms.

• Perform root cause analysis for recurring vulnerabilities and recommend preventive controls.

• Create and maintain vulnerability management procedures, remediation runbooks, and technical documentation.

• Generate executive dashboards, compliance reports, remediation metrics, and risk-based reporting for leadership teams.

• Support vulnerability remediation projects, security initiatives, and continuous improvement activities.

• Participate in incident response activities related to security vulnerabilities, malware outbreaks, and zero-day threats.

Disclaimer : This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.