Information Vulnerability Management Engineer

Mom's Meals•Ankeny, IA

1d•$89,000 - $94,000•Remote

About The Position

The Vulnerability Management Engineer administers and enhances the organization’s vulnerability management program by identifying, assessing, prioritizing, and driving remediation of security vulnerabilities across IT systems. The role reduces risk and threat exposure by ensuring vulnerabilities are addressed in accordance with security policies. The position can be remote and requires occasional travel for business meetings and company events. Remote hires must travel to the company’s headquarters in Ankeny, Iowa, for the first few days for orientation, training, and onboarding; this travel is company paid. Applicants who require immigration sponsorship or additional work authorization now or in the future are not being considered. The stated salary range is $89,000–$94,000, with a bonus target also mentioned but not specified.

Requirements

1–3 years of experience in a similar infrastructure or security role.
Working knowledge of Intune, Automox, Active Directory Group Policy, and PowerShell scripting.
Hands-on experience with patch management, deployment, and reporting.
Good working knowledge of current IT risks and experience implementing security solutions.
Experience administering and securing Windows Server, Windows 10 and 11, and macOS.
Effective troubleshooting skills and ability to solve complex problems.
Strong attention to detail and analytical skills.
Excellent interpersonal and communication skills.
Ability to work under pressure and meet tight deadlines.

Nice To Haves

Relevant certifications such as CompTIA Security+, CompTIA Network+, or Microsoft 365 Certified: Endpoint Administrator Associate (MD-102); equivalent hands-on infrastructure or security experience is also valued.
Familiarity with software development lifecycles and application vulnerability remediation, including collaboration with development teams.
Experience validating vulnerability findings, confirming remediation, or integrating vulnerability management with patching and ticketing workflows.
Incident response experience; candidates without prior experience should demonstrate willingness to learn and develop these skills through training and hands-on participation.
Experience leveraging artificial intelligence to aid in technical tasks.
Exposure to cloud security.

Responsibilities

Manage internal and external vulnerability scanning, maintain coverage of in-scope assets, and validate findings to support accurate remediation.
Assess and prioritize vulnerabilities based on severity, exploitability, asset exposure, and business impact.
Monitor newly disclosed vulnerabilities, active exploitation, and emerging threats; coordinate timely remediation or appropriate compensating controls.
Manage endpoint and server patching, coordinating with asset owners to remediate vulnerabilities within established timelines.
Own third-party application patch management using Automox, Intune, Patch My PC Cloud, and scripting, including deployment validation and coordination of testing and change approvals.
Collaborate with infrastructure and software engineering teams to assign remediation ownership, track progress against deadlines, escalate overdue findings, and validate remediation through rescanning.
Directly remediate vulnerabilities when appropriate using Intune, Active Directory Group Policy, Automox, and PowerShell scripting, following testing and change-management processes.
Report vulnerability trends, remediation progress, overdue findings, scan coverage, and material risks to IT leadership.
Own and continuously improve the vulnerability management lifecycle, including scanning, prioritization, remediation tracking, validation, and exception documentation.
Participate in the ongoing on-call rotation, triaging and investigating security alerts, responding to incidents, and coordinating escalation and remediation as needed.