VULNERABILITY MANAGEMENT ENGINEER

SUMMARY

The Vulnerability Management Engineer’s role is to manage various platforms and assist with various

infrastructure related projects. This role will ensure the vulnerability management assessment platform

is managed following company IT standards and best practices. This individual should possess

experience in Vulnerability Management or other related security domain(s). This individual should

develop and maintain strong working relationships with teams and Operating Units that are responsible

for vulnerability management and patching; requirements for remediation and mitigation of

vulnerabilities and use automated technical means to validate that appropriate measures have been

implemented to address the enterprise’s cybersecurity requirements. The individual should possess a

comprehensive understanding of the kinds of vulnerabilities that can impact cloud, production

environments and endpoints.

RESPONSIBILITIES:

• Maintain a comprehensive understanding of vulnerability management methodologies,

procedures, and solutions for both application and infrastructure vulnerability management.

• Familiarize and work with patching processes and related technologies, including SCCM, Qualys,

PowerShell, and Nessus.

• Possess knowledge and expertise in using Qualys.

• Analyze and understand metrics and trends related to vulnerability management functions.

• Manages and coordinates the activities of a project or solution to ensure that goals and

objectives of the project are accomplished within a specified time frame

• Develop, recommend, and implement necessary improvements and changes to existing

processes.

• Recommend, schedule, and perform software and hardware improvements, upgrades, patches,

reconfigurations, and/or purchases.

• Develop, document, and maintain policies and procedures, along with associated training plans

for system administration and appropriate use.

EDUCATION AND EXPERIENCE REQUIREMENTS

• Bachelor’s Degree

• 3-5 years of experience in Information Security, Computer Science, Business Administration, Data

Analytics, or related field

• Experience working with IT Service Management systems

• Experience working with IT Asset Management systems

• Licenses/ Certifications: preferably with ITIL Foundation, Security and GSEC2024-0711

• Experience working with service delivery methodologies (ITIL) – Intermediate Level

• Experience with End Point Protection – Intermediate Level

• Experience in automation and scripting: PowerShell, VBScript – Intermediate Level

• Performance analysis, troubleshooting and remediation techniques

• High Availability and Disaster Recovery principles, patterns and usage

COMPETENCIES:

• Customer service oriented and proactive in anticipating and resolving problems while

maximizing efficient use of available IT resources

• Uses excellent problem-solving, communication, and interpersonal skills along with a

patient, positive, and customer-friendly attitude within a team environment

• Demonstrates outstanding customer orientation and desire to enable client productivity

• Communicates effectively and efficiently with technical and non-technical audiences at all

levels of organization; utilizes appropriate communication channels for given situations

• Acts professionally and tactfully at all times and in all situations; maintains a professional

demeanor and appearance

• Produces high quality work results with a sense of urgency while maintaining a high level of

focus on detail, exactness and completeness

• Builds leveraging relationships & teamwork environment with clients, peers and other IT

teams that facilitate knowledge and information sharing; contribute to team’s body of

knowledge; being recognized as a dependable member of team and a source of positive

energy and attitude for clients and team

• Adheres to change management and documentation policies

• Good written and verbal communication skills