Hybrid Vulnerability Management Engineer

at Deepwatch

• Job title: Vulnerability Management Engineer
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: $115,000 - $130,000 per year
• Degree requirement: No Education Requirement
• Tech skills: Firewalls, Linux
• Location requirements: Hybrid, Tampa, United States

About the role

• Vulnerability Management Engineer overseeing vulnerability assessments, managing remediation, and collaborating with customers. Join Deepwatch's team to redefine cybersecurity as a leader in managed security services.

Responsibilities

• Deliver vulnerability management as a service, overseeing multiple workstreams while meeting specific service-level (SLA) commitments.
• Manage the full remediation lifecycle by collaborating with infrastructure and application owners on security hot-fixes and patch validation.
• Perform discovery and grouping of network-connected systems to ensure comprehensive scanning across networks, OSs, apps, and databases.
• Conduct regular scans on both production and pre-production deployments to identify flaws before and after release.
• Create remediation reports and dashboards to track vulnerabilities and remediations
• Assist with attestation scan and compliance report
• Analyze vulnerabilities to filter false positives and prioritize remediation based on the actual risk of exploitation.
• Develop remediation action plans and generate tickets for system owners to address identified flaws.
• Speak in-depth on hardening guidelines (NIST, CIS) and implement mitigation factors (Firewalls, IDS/IPS) to reduce risk when patching isn't immediate.
• Analyze new technologies, zero-day threats, and reviews of new technology released by supported vendors to provide mitigation strategies.
• Develop and document Standard Operating Procedures (SOPs) and assist in maintaining automation and scripting tools.
• Support cyber incident response teams with vulnerability discovery and identification during crisis management.
• Mentor, coach, and train other team members while producing educational content like blog posts and vulnerability summary sheets for customers.
• Handle customer escalations regarding technology or remediation issues to ensure successful service delivery.

Requirements

• Demonstrate strong customer service and communication skills, both oral and written with the ability to build relationships at all levels
• Possess experience, and demonstrated success, developing and managing an organizational vulnerability management program
• Demonstrate fundamental knowledge of network vulnerability scanning technologies
• Demonstrate an understanding of Web Application Security vulnerabilities and mitigating defenses
• Possess experience with vulnerability remediation management and patching
• Have knowledge of vulnerability management best practices from NIST, ISO, PCI, OWASP, and CIS
• Possess experience in deploying and operating vulnerability scanning infrastructure, services and solutions
• Leverage fundamental technical skills in the following areas:
• • Active Directory
• • Windows
• • Linux
• • Networking
• Are proficient in the use of data manipulation, dashboard and reporting tools
• Have earned industry recognized certifications, such as GEVA, CISSP, CISM, GPEN, GIAC, CISA, etc.
• Possess security consulting or managed services experience

Benefits

• Medical, dental, vision, and disability insurance
• Flexible Time Off (FTO), 12 company holidays, sick leave and 8-Weeks Paid Parental Leave
• Unique professional development benefits with Annual “development dollars” to support our people growth and development
• Wellness contests and monthly educational programs
• 401(K) retirement program