Security Engineer II - Threat & Vulnerability Management

AmTrust Financial Services•Cleveland, OH

About The Position

The Security Engineer II is a member of the Threat & Vulnerability Management team and is responsible for reducing enterprise technology risk by identifying, assessing, prioritizing, remediating, and managing vulnerabilities across the organization. The role analyzes and correlates vulnerability findings, applies risk-based decision-making, and partners with application, infrastructure, cloud, DevOps, risk, and other technology teams to drive remediation through verified closure. The position supports vulnerability governance, exception management, metrics, reporting, and continuous program improvement. It uses security tooling, automation, integrations, and workflow optimization to improve the efficiency and effectiveness of vulnerability management processes. The role also provides threat intelligence to inform vulnerability prioritization and broader security and business decisions.

Requirements

Bachelor’s degree in Computer Science, Information Technology, Computer Engineering, Cybersecurity, or a related field, or equivalent relevant professional experience.
At least 3 years of experience managing enterprise vulnerability management programs across on-premises, cloud, and hybrid environments.
Hands-on experience with vulnerability management platforms such as Tenable, Qualys, Rapid7, or Microsoft Defender VM.
Experience with vulnerability assessment, validation, prioritization, and remediation practices.
Strong understanding of vulnerability and threat intelligence frameworks, including CVE, CVSS, CISA KEV, exploit intelligence, attack surface management, and risk-based decision-making.

Nice To Haves

Experience securing Azure, AWS, GCP, cloud-native workloads, and containerized applications.
Relevant certifications such as CISSP, CySA+, GCVA, GSEC, GCSA, GCTI, or OSCP.

Responsibilities

Own and continuously evolve the enterprise Vulnerability Management Program across the IT environment.
Manage the vulnerability lifecycle, including discovery, validation, risk prioritization, remediation tracking, exception management, verification, and reporting.
Analyze threat actors, campaigns, industry trends, and emerging cyber risks to inform vulnerability prioritization, exposure management, and security and business decisions.
Operate and optimize vulnerability assessment technologies to maintain asset coverage, accurate findings, and actionable risk visibility.
Correlate and prioritize findings across vulnerability management platforms, attack surface management solutions, and threat intelligence sources.
Prioritize risks using CVSS, CISA Known Exploited Vulnerabilities (KEV), exploitability, asset criticality, exposure, and business impact.
Partner with asset management and technology teams to improve asset inventory accuracy, security coverage, ownership attribution, and enterprise risk visibility.
Design, develop, and maintain security automation capabilities that improve vulnerability management and related security operations processes.
Build and enhance integrations, workflows, and tooling across security platforms to automate repetitive tasks and improve visibility, reporting, data quality, and security operations.
Coordinate and drive remediation across infrastructure, application, cloud, network, and other technical teams in accordance with service-level objectives and risk severity.
Lead coordinated responses to critical vulnerabilities, zero-day threats, and actively exploited CVEs, including rapid assessment, prioritization, remediation, and risk communication.
Manage vulnerability exceptions, compensating controls, risk acceptance processes, and periodic reviews.
Develop and maintain vulnerability management policies, standards, procedures, runbooks, and reporting frameworks.
Develop executive and operational metrics for risk reduction, remediation performance, vulnerability trends, asset coverage, SLA adherence, exception exposure, and mean time to remediate.
Support audits, compliance assessments, and enterprise risk management through documentation, reporting, and evidence collection.
Monitor emerging vulnerabilities, exploitation trends, threat intelligence, and industry best practices to improve program effectiveness and risk-based prioritization.