Information Vulnerability Management Engineer

Mom's Meals•Ankeny, IA

5d•Remote

About The Position

The Vulnerability Management Engineer administers and enhances the organization’s vulnerability management program by identifying, assessing, prioritizing, and driving remediation of security vulnerabilities across IT systems. The role helps minimize risk and threat exposure in accordance with security policies and requires technical skills, attention to detail, and a proactive approach to protecting the organization’s IT infrastructure. The position can be remote, with occasional travel for business meetings and company events. Remote hires must travel to the company headquarters in Ankeny, Iowa, for their first few days for orientation, training, and onboarding; this travel is company-paid. The role participates in an ongoing on-call rotation. The salary range is $89,000–$94,000, plus a 10% bonus target. Mom’s Meals provides home-delivered, fully prepared refrigerated meals to people including seniors, patients recovering after hospital discharge, and people managing chronic conditions. The company describes itself as a family-operated business focused on community and helping others. Mom’s Meals complies with applicable federal and state nondiscrimination laws.

Requirements

1–3 years of experience in a similar infrastructure or security role.
Working knowledge of Intune, Automox, Active Directory Group Policy, and PowerShell scripting.
Hands-on experience with patch management, deployment, and reporting.
Good working knowledge of current IT risks and experience implementing security solutions.
Experience administering and securing Windows Server, Windows 10 and 11, and macOS.
Effective troubleshooting skills and ability to solve complex problems.
Strong attention to detail and analytical skills.
Excellent interpersonal and communication skills.
Ability to work under pressure and meet tight deadlines.
Ability to work in the United States without requiring immigration sponsorship now or in the future.
Ability to travel to the Ankeny, Iowa, headquarters for the first few days of orientation, training, and onboarding if hired remotely; this travel is company-paid.
Ability to participate in an ongoing on-call rotation.

Nice To Haves

Relevant certifications such as CompTIA Security+, CompTIA Network+, or Microsoft 365 Certified: Endpoint Administrator Associate (MD-102); certifications are preferred but not required, and equivalent hands-on infrastructure or security experience is valued.
Familiarity with software development lifecycles and application vulnerability remediation, including collaboration with development teams.
Experience validating vulnerability findings, confirming remediation, or integrating vulnerability management with patching and ticketing workflows.
Incident response experience; candidates without prior experience should demonstrate willingness to learn and develop these skills through training and hands-on participation.
Experience leveraging artificial intelligence to aid in technical tasks.
Exposure to cloud security.

Responsibilities

Manage internal and external vulnerability scanning, maintain coverage of in-scope assets, and validate findings to support accurate remediation.
Assess and prioritize vulnerabilities based on severity, exploitability, asset exposure, and business impact.
Monitor newly disclosed vulnerabilities, active exploitation, and emerging threats; coordinate timely remediation or appropriate compensating controls.
Manage endpoint and server patching and coordinate with asset owners to remediate vulnerabilities within established timelines.
Own third-party application patch management using Automox, Intune, Patch My PC Cloud, and scripting, including deployment validation and coordination of testing and change approvals.
Collaborate with infrastructure and software engineering teams to assign remediation ownership, track progress against deadlines, escalate overdue findings, and validate remediation through rescanning.
Directly remediate vulnerabilities where appropriate using Intune, Active Directory Group Policy, Automox, and PowerShell scripting, following established testing and change-management processes.
Report vulnerability trends, remediation progress, overdue findings, scan coverage, and material risks to IT leadership.
Own and continuously improve the vulnerability management lifecycle, including scanning, prioritization, remediation tracking, validation, and exception documentation.
Participate in the ongoing on-call rotation, triage and investigate security alerts, respond to incidents, and coordinate escalation and remediation as needed.