Senior Vulnerability Specialist (Infra)

Citizens•Johnston, RI

4d•$96,000 - $135,000•Hybrid

About The Position

Senior Security Automation Engineer responsible for advancing the enterprise Vulnerability Management program through automation, orchestration, and process optimization. Focus on improving efficiency, scalability, and data quality across infrastructure, cloud, and application environments. Partner with Vulnerability Management, Engineering, Infrastructure, Cloud, and ServiceNow teams to enable risk based remediation at scale.

Requirements

5+ years of experience in cybersecurity engineering, security automation, or Vulnerability Management
Strong scripting skills using Python, PowerShell, Bash, or similar languages
Experience integrating security tools and workflows using APIs and automation platforms
Familiarity with Qualys, Tenable, Rapid7, Wiz, and ServiceNow
Strong understanding of Vulnerability Management processes and remediation workflows
Knowledge of cloud platforms, REST APIs, and automation best practices
Strong analytical, troubleshooting, and communication skills
Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or related field, or equivalent experience

Nice To Haves

Experience with ServiceNow SecOps or Vulnerability Response
Familiarity with DevSecOps, CI CD pipelines, and infrastructure as code
Experience with cloud and container security technologies
Knowledge of regulatory frameworks such as PCI DSS, NIST, or FFIEC
Experience in large enterprise or regulated environments
Certifications such as CISSP, Security+, GSEC, GCSA, or cloud security certifications preferred

Responsibilities

Design, build, and maintain automation solutions supporting enterprise Vulnerability Management
Develop integrations across vulnerability management platforms, ServiceNow, cloud environments, CMDB, reporting systems, and security tools
Automate vulnerability intake, enrichment, correlation, prioritization, assignment, exception handling, and remediation tracking
Reduce manual processes through scripting, APIs, orchestration, and workflow automation
Improve and optimize Vulnerability Management workflows and operational processes
Build automated dashboards, metrics, and reporting for operational and executive stakeholders
Identify process bottlenecks and implement scalable automation solutions
Enhance asset inventory correlation, remediation validation, SLA tracking, and risk based prioritization
Develop and maintain scripts, APIs, and data pipelines supporting vulnerability data normalization and enrichment
Integrate security platforms including Qualys, Tenable, Wiz, ServiceNow, and cloud technologies
Ensure data accuracy, consistency, and reliability across platforms and reporting systems
Support data analysis and reporting for regulatory, audit, and operational requirements
Partner with infrastructure, cloud, engineering, and security teams to improve remediation workflows and maturity
Support automation aligned with DevSecOps and enterprise modernization initiatives
Research emerging technologies and identify opportunities for automation and scalability
Participate in troubleshooting, root cause analysis, and continuous improvement across the Vulnerability Management ecosystem