Vulnerability Assessment Engineer

Job description

We are hiring an experienced Vulnerability Assessment Engineer to own the end-to-end vulnerability management lifecycle, from assessment and risk prioritization through remediation tracking and reporting. The role will primarily work with CrowdStrike Spotlight while conducting supplemental vulnerability assessments across infrastructure and devices outside agent coverage. Responsibilities include triaging and prioritizing findings across approximately 3,600 devices and 250 servers, using CVSS-based scoring to rank risk, coordinating remediation timelines for server/OS patches and network firmware updates, performing supplemental assessments for assets outside coverage such as firewalls and IoT devices, assessing infrastructure involving Palo Alto, Fortinet, and Cisco Meraki, coordinating periodic internal and external penetration testing and tracking findings to closure, monitoring remediation SLAs, producing recurring posture and compliance reports, and escalating high‑risk vulnerabilities to the Security Analyst.

Requirements

• Strong hands‑on experience in vulnerability management and assessment
• Strong understanding of CVSS scoring and risk‑based vulnerability prioritization
• Network and infrastructure vulnerability assessment methodologies
• Knowledge of vulnerability assessment across firewalls, network devices, servers, and endpoints
• Penetration testing fundamentals or experience coordinating penetration testing activities
• Patch management and remediation tracking
• Experience managing vulnerability remediation SLAs
• Compliance‑focused vulnerability reporting, including support for regulatory requirements such as PDPL

Skills