Threat & Vulnerability Management Security Engineer II

AmTrust Financial Services, Inc.•Cleveland, OH

About The Position

The TVM Security Engineer II is a member of the Threat & Vulnerability Management team, responsible for reducing enterprise technology risk by identifying, assessing, prioritizing, remediating, and managing vulnerabilities across the organization. The role analyzes and correlates vulnerability findings, applies risk-based decision-making, and partners with application, infrastructure, cloud, DevOps, and risk teams to drive remediation through verified closure. It also supports vulnerability governance, exception management, metrics, reporting, and continuous program improvement. The position uses security tooling, automation, integrations, and workflow optimization to improve vulnerability management processes. The successful candidate brings vulnerability management expertise, hands-on technical skills, risk analysis capabilities, process improvement experience, and the ability to collaborate across technical and business teams to deliver measurable risk reduction.

Requirements

Bachelor’s degree in Computer Science, Information Technology, Computer Engineering, Cybersecurity, or a related field, or equivalent relevant professional experience.
At least 3 years of experience managing enterprise vulnerability management programs across on-premises, cloud, and hybrid environments.
Hands-on experience with vulnerability management platforms such as Tenable, Qualys, Rapid7, or Microsoft Defender VM, and with vulnerability assessment, validation, prioritization, and remediation practices.
Strong understanding of vulnerability and threat intelligence frameworks, including CVE, CVSS, CISA KEV, exploit intelligence, attack surface management, and risk-based decision-making.

Nice To Haves

Experience securing modern technology environments, including Azure, AWS, GCP, cloud-native workloads, and containerized applications.
Relevant certifications such as CISSP, CySA+, GCVA, GSEC, GCSA, GCTI, or OSCP.

Responsibilities

Own and continuously evolve the enterprise Vulnerability Management Program across the IT environment.
Manage the vulnerability lifecycle, including discovery, validation, risk prioritization, remediation tracking, exception management, verification, and reporting.
Analyze threat actors, campaigns, industry trends, and emerging cyber risks to inform vulnerability prioritization, exposure management, and security and business decisions.
Operate and optimize vulnerability assessment technologies to maintain asset coverage, accurate findings, and actionable risk visibility.
Correlate and prioritize findings across vulnerability management platforms, attack surface management solutions, and threat intelligence sources.
Prioritize risks using CVSS, CISA KEV, exploitability, asset criticality, exposure, and business impact.
Partner with asset management and technology teams to improve asset inventory accuracy, security coverage, ownership attribution, and enterprise risk visibility.
Design, develop, and maintain security automation that streamlines vulnerability management and related security operations while preserving appropriate governance and oversight.
Build and enhance security-platform integrations, workflows, and tooling to automate repetitive tasks, improve visibility and reporting, and enable scalable end-to-end security operations.
Coordinate remediation across infrastructure, application, cloud, network, and other technical teams in accordance with service-level objectives and risk severity.
Lead coordinated responses to critical vulnerabilities, zero-day threats, and actively exploited CVEs, including rapid assessment, prioritization, remediation, and risk communication.
Manage vulnerability exceptions, compensating controls, risk acceptance, and periodic exception reviews.
Develop and maintain vulnerability management policies, standards, procedures, runbooks, and reporting frameworks.
Develop executive and operational metrics for risk reduction, remediation performance, vulnerability trends, asset coverage, SLA adherence, exception exposure, and mean time to remediate.
Support audits, compliance assessments, and enterprise risk management through documentation, reporting, and evidence collection.
Monitor emerging vulnerabilities, exploitation trends, threat intelligence, and industry best practices to improve program effectiveness and risk-based prioritization.