Cybersecurity Engineer

Yancey Bros. Co.•Mableton, GA

26d

About The Position

The Cybersecurity Engineer is responsible for leading vulnerability identification, risk-based prioritization, and remediation efforts across corporate IT, cloud, and operational technology (OT) environments. The ideal candidate will move the program beyond scanning and patching to deliver actionable risk insights, measurable reductions in exposure, and executive-level visibility.

Requirements

5–8+ years of cybersecurity experience, with at least 3 years focused on vulnerability management or security operations.
Hands-on experience operating vulnerability management programs in enterprise environments.
Experience supporting manufacturing, industrial, or OT environments.
Experience with vulnerability scanning, configuration assessment, and remediation tracking tools.
Strong understanding of enterprise IT, network, cloud, and system architecture.
Ability to translate technical vulnerability data into clear business risk.
Familiarity with industry frameworks such as NIST CSF and CIS Controls.
Relevant certifications such as CISSP, CISM, GIAC, or equivalent.
Yancey Bros. Co. Required Safety Training and Annual recertifications.

Responsibilities

Lead enterprise vulnerability scanning, assessment, and validation activities across IT, cloud, and OT environments.
Analyze vulnerability data to determine business, operational, and safety impact, reducing false positives and noise.
Prioritize vulnerabilities using a risk-based approach that incorporates asset criticality, exploitability, and threat intelligence.
Partner with infrastructure, application, cloud, and OT teams to drive remediation plans and patching activities.
Establish and manage remediation SLAs, tracking progress, exceptions, and risk acceptances.
Develop and maintain dashboards and metrics that clearly communicate vulnerability risk, trends, and remediation effectiveness.
Continuously improve the vulnerability management lifecycle, including tools, processes, and integrations with CMDB, ticketing, and monitoring platforms.
Provide subject-matter expertise, guidance, and mentorship to analysts and technology teams.
Ensure vulnerability management practices align with organizational policy, regulatory requirements, and industry best practices.
Participate in required safety program, and work in a safe manner.
Other tasks as assigned.