Security Engineer I - Threat & Vulnerability Management

AmTrust Financial Services•Cleveland, OH

About The Position

The Security Engineer I is a member of the Threat & Vulnerability Management team and supports the identification, assessment, prioritization, remediation, and ongoing management of vulnerabilities across the organization. The role works with security and technology teams to analyze vulnerability data, assess risk, track remediation, validate remediation activities, and help reduce enterprise technology risk. It offers hands-on experience with vulnerability management platforms, threat intelligence, automation, and risk-based decision-making while contributing to the organization's cybersecurity program. The position also supports remediation governance, vulnerability-related documentation, reporting, audit and compliance activities, and improvements to processes and automation. The ideal candidate has a foundation in cybersecurity, strong analytical and problem-solving skills, and an interest in developing expertise in vulnerability and exposure management and enterprise security operations.

Requirements

Bachelor’s degree in Computer Science, Information Technology, Computer Engineering, Cybersecurity, or a related field, or equivalent relevant professional experience.
1–3 years of experience in cybersecurity, vulnerability management, security operations, or a related technical role.
Solid understanding of vulnerability management concepts, remediation processes, and risk-based prioritization.
Experience with or exposure to vulnerability management platforms such as Tenable, Qualys, Rapid7, or Microsoft Defender Vulnerability Management.
Familiarity with security frameworks and standards including CVE, CVSS, and CISA Known Exploited Vulnerabilities (KEV).
Working knowledge of Windows, Linux, networking, cloud platforms, and enterprise technology environments.
Strong analytical, organizational, and communication skills, including the ability to collaborate across technical teams.

Nice To Haves

Relevant certifications such as Security+, CySA+, or similar certifications.

Responsibilities

Support the vulnerability management lifecycle, including vulnerability identification, validation, remediation tracking, verification, and reporting.
Review and analyze vulnerability scan results to help identify and prioritize security risks.
Assist with operating and maintaining vulnerability assessment tools to support accurate asset coverage and vulnerability visibility.
Track remediation activities and follow up with technology teams to ensure vulnerabilities are addressed within established timelines.
Research vulnerabilities, security advisories, threat intelligence, and industry best practices to understand emerging risks.
Assist with vulnerability assessments across on-premises, cloud, and hybrid environments.
Support asset inventory and ownership validation efforts to improve vulnerability tracking and visibility.
Develop and maintain security integrations, automation, and workflows to enhance vulnerability management and risk visibility.
Assist in developing and maintaining dashboards, reports, and metrics related to vulnerability management activities.
Participate in vulnerability validation and verification to confirm successful remediation.
Contribute to process improvement and automation initiatives that enhance program efficiency and effectiveness.
Partner with infrastructure, application, cloud, and other technology teams to support remediation efforts.
Assist with documenting and tracking vulnerability exceptions, compensating controls, and risk acceptance decisions.
Support the development and maintenance of vulnerability management procedures, standards, and operational documentation.
Help prepare reporting materials for operational reviews and security governance activities.
Assist with audit and compliance activities by collecting and organizing supporting documentation and evidence.
Monitor vulnerability disclosures, vendor security advisories, and emerging threats to help identify potential organizational impacts.
Escalate critical findings and remediation challenges to senior team members when appropriate.