Senior Vulnerability Engineer

TEKsystems•Erie, PA

7d•$70 - $80•Onsite

About The Position

Seeking a skilled and proactive Vulnerability Engineer to join our Cybersecurity team. This role is responsible for identifying, assessing, prioritizing, and helping remediate vulnerabilities across the organization's infrastructure, applications, cloud environments, and endpoints. The Vulnerability Engineer will work closely with infrastructure, application development, cloud, and security teams to reduce cyber risk and strengthen the organization's security posture. The ideal candidate has a strong understanding of cybersecurity principles, vulnerability management programs, risk assessment methodologies, and security technologies. This position plays a critical role in protecting enterprise systems and sensitive customer information while supporting regulatory and compliance requirements.

Requirements

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field; equivalent experience may be considered.
7 plus years of experience in cybersecurity, vulnerability management, security engineering, or related disciplines.
Experience using vulnerability management platforms such as Tenable, Qualys, Rapid7, or similar solutions.
Knowledge of operating systems including Windows, Linux, and Unix environments.
Understanding of networking concepts, protocols, and enterprise security architectures.
Experience assessing vulnerabilities in cloud platforms such as AWS, Azure, or Google Cloud.
Familiarity with security frameworks and standards including NIST, CIS Controls, ISO 27001, and OWASP.
Knowledge of patch management processes and security remediation practices.
Strong analytical, problem-solving, and communication skills.
Ability to explain technical risks and remediation recommendations to both technical and non-technical audiences.

Nice To Haves

Industry certifications such as: CISSP, GIAC (GSEC, GMON, GPEN, or similar), Security+, Certified Ethical Hacker (CEH), Azure Security Engineer Associate, AWS Security Specialty
Experience with Security Information and Event Management (SIEM) platforms.
Experience scripting or automating tasks using PowerShell, Python, Bash, or similar languages.
Knowledge of DevSecOps practices and modern application security methodologies.
Experience working in highly regulated industries such as insurance, financial services, or healthcare.

Responsibilities

Manage and execute the enterprise vulnerability management lifecycle, including identification, assessment, prioritization, remediation tracking, and reporting.
Conduct regular vulnerability assessments on servers, workstations, network devices, cloud resources, databases, and applications.
Analyze scan results and validate vulnerabilities to reduce false positives and improve remediation accuracy.
Collaborate with IT infrastructure, cloud, development, and operations teams to prioritize and remediate security vulnerabilities.
Develop risk-based remediation strategies using industry-standard scoring methodologies such as CVSS and threat intelligence.
Monitor emerging threats, vulnerabilities, and security advisories to assess organizational impact.
Support security incident investigations by identifying exploited vulnerabilities and recommending corrective actions.
Create dashboards, reports, and metrics that communicate vulnerability trends, remediation progress, and organizational risk.
Assist with penetration testing efforts and coordinate remediation activities resulting from security assessments.
Implement automation and process improvements to enhance vulnerability management efficiency.
Support security audits, regulatory assessments, and compliance initiatives.
Maintain documentation, standards, procedures, and technical guidance related to vulnerability management.
Partner with technology teams to integrate security best practices into system and application lifecycles.