IT Vulnerability Engineer III (Must Reside in Texas)

Randolph-Brooks Federal Credit Union•San Antonio, TX

1d•Hybrid

About The Position

Randolph-Brooks Federal Credit Union is seeking an experienced Vulnerability Engineer III to join its IT Security team. The role builds and scales vulnerability management and exposure-reduction capabilities across the enterprise technology ecosystem. It leads complex assessments and response activities, combines technical validation with threat and asset context, drives remediation across engineering teams, and develops automation, standards, and analytics to improve coverage, prioritization, and measurable risk reduction. The position can work on a hybrid schedule after a training period of variable length. Training takes place at the RBFCU Administrative Service Center in Live Oak, Texas. Applicants must reside in Texas and be able to perform all work from a home in Texas. Remote work requires a reliable home internet provider, a connection meeting RBFCU's minimum requirements, the ability to connect directly to the modem by Ethernet, and a safe, suitable, distraction-free workspace.

Requirements

Bachelor's degree in Computer Science, Management Information Systems, Cybersecurity, Information Technology, or a related field, or an equivalent combination of education and experience.
3–5 years of direct experience in vulnerability management, vulnerability assessment, attack surface management, threat exposure management, or security operations.
Experience with risk-based vulnerability management, continuous threat exposure management, external attack surface management, attack-path analysis, or breach and attack simulation.
Experience building automated vulnerability validation, remediation orchestration, exception governance, risk scoring, and executive or engineering reporting capabilities.
Hands-on experience with Snowflake, Databricks, Microsoft Fabric, Splunk, Power BI, or comparable analytics and data platforms.
Experience with Infrastructure as Code, software supply chain risk, container registries, cloud security posture management, or application security findings.
Deep hands-on experience with vulnerability discovery, technical validation, risk-based prioritization, remediation, exception handling, and enterprise reporting.
Experience assessing and securing Windows, Linux, network infrastructure, cloud platforms, containers, Kubernetes, databases, and common enterprise services.
Advanced understanding of vulnerability and exposure concepts, including CVSS, EPSS, KEV, exploit maturity, attack paths, asset criticality, reachability, compensating controls, and residual risk.
Production-quality automation or software development experience using Python, PowerShell, Go, Java, SQL, APIs, or comparable technologies.
Experience integrating vulnerability data with asset inventory, CMDB, ticketing, SIEM, SOAR, data lakes, analytics platforms, or workflow systems.
Advanced analytical skills and judgment to make defensible risk decisions in ambiguous situations involving incomplete data, operational constraints, and competing priorities.
Subject-matter expertise across vulnerability platforms, infrastructure domains, cloud, automation, analytics, and risk prioritization.
Ability to influence multiple technology teams, platforms, or business portfolios and improve program-level risk outcomes.
Ability to set technical direction, mentor others, lead urgent responses, and improve the quality of engineering and risk decisions.
Must reside in Texas and be able to perform all work from a home in Texas.
Must have a reliable home internet provider meeting RBFCU's minimum requirements, the ability to hard-wire a connection directly to the modem, and a safe, suitable, distraction-free home workspace.

Responsibilities

Lead complex vulnerability assessments and exposure analysis across hybrid infrastructure, endpoints, networks, cloud platforms, containers, data platforms, and externally accessible services.
Validate and contextualize high-risk findings using exploit intelligence, attack-path analysis, asset criticality, business impact, compensating controls, and hands-on technical investigation.
Lead organizational responses to critical and emerging vulnerabilities, including impact analysis, scoping, stakeholder coordination, remediation strategy, executive updates, and closure assurance.
Drive vulnerability triage, prioritization, exception analysis, remediation planning, escalation, retesting, and risk reporting across multiple technology teams.
Design and maintain production-quality tooling, integrations, data pipelines, and automation for discovery, enrichment, normalization, deduplication, validation, ticketing, orchestration, and reporting.
Improve assessment coverage and accuracy by resolving systemic issues involving asset inventory, ownership, credentials, network reachability, cloud connectors, tagging, and scanner configuration.
Translate recurring exposure patterns into secure configuration standards, patching guardrails, remediation playbooks, service-level expectations, and preventive controls.
Define metrics and analytics for exploitable exposure, risk concentration, aging, remediation effectiveness, coverage, exceptions, and control performance.
Partner with infrastructure, cloud, network, endpoint, platform, application, architecture, incident response, audit, and risk teams to drive durable remediation outcomes.
Mentor engineers, improve technical review quality, and provide leadership during urgent or high-consequence vulnerability events.
Set technical direction for initiatives, define approaches and priorities for complex assessments and capability improvements, and develop scalable solutions to systemic causes.
Build alignment among engineers, service owners, architects, incident responders, risk partners, and leadership.