Vulnerability Management Engineer I

Avnet

16h•Remote

About The Position

The Vulnerability Management Engineer I supports vulnerability scanning operations, remediation validation, exception handling, vulnerability advisories, finding reassignment, and External Attack Surface Management. The role monitors scan schedules and scanner health, maintains incident and remediation tickets, validates scan results, and documents evidence and outcomes. It also supports reporting and SLA tracking through vulnerability management tools and coordinates with asset owners and internal stakeholders to follow up on remediation activities. As experience and operational maturity develop, the engineer may gradually support selected security engineering activities under guidance, including security configuration assessments, asset onboarding validation, review of approved security templates, coordination on tooling issues, and process improvement or automation initiatives. The role requires accurate documentation, clear communication, adherence to documented procedures, ownership of assigned work, and willingness to learn and grow into broader security engineering responsibilities. The position is expected to be performed remotely, with regular updates, collaboration, and disciplined time management.

Requirements

Basic understanding of cybersecurity concepts, vulnerabilities, risk ratings, CVEs, remediation, and patching.
Foundational knowledge of networking concepts, including IP addresses, subnets, ports, protocols, and network connectivity.
Basic familiarity with Windows, Linux, network devices, databases, and cloud or virtualized environments.
Ability to work with dashboards, reports, CSV exports, tickets, and documented operational procedures.
Good written communication skills for ticket updates, stakeholder follow-ups, and evidence documentation.
Attention to detail and ability to accurately validate asset information, vulnerability details, scan results, and exception evidence.
Willingness to learn vulnerability management platforms, IT service management tools, CMDB processes, and enterprise security workflows.
Ownership of assigned tasks, clear communication, adherence to documented procedures, accuracy, curiosity, and willingness to learn.
Ability to work effectively in a remote environment with regular updates, collaboration, and disciplined time management.

Nice To Haves

Bachelor’s degree in computer science, information technology, cybersecurity, electronics, or a related field.
Cybersecurity fundamentals training or certifications such as Security+, CC, Network+, or equivalent learning exposure; preferred but not mandatory.

Responsibilities

Validate vulnerability scan schedules and confirm scans run as planned across assigned networks, subnets, and regions.
Monitor scanner appliance health, assignments, configurations, and failures, including offline scanners, authentication or access issues, and network connectivity problems.
Raise, update, and follow up on incident or remediation tickets related to scanner failures, scan issues, and vulnerability remediation.
Support approved ad hoc rescans for eligible assets; validate hostnames, IP addresses, and vulnerability details; and confirm whether remediation resolved findings.
Update remediation tickets with scan results, CSV reports, evidence, and clear remediation validation notes.
Monitor vulnerability dashboards and extract reports from tools such as ArmorCode and CrowdStrike for findings, statistics, SLA tracking, and evidence collection.
Review exception requests by validating affected assets, justification, evidence, asset and risk owners, exception category, and approval status.
Support creation and maintenance of approved exceptions in vulnerability management platforms after required approvals are complete.
Assist with vulnerability advisories by validating CVE availability, affected assets, and impacted versions, and coordinating remediation follow-up with asset owners.
Review finding reassignment requests, validate ownership evidence, prepare templates, and coordinate with internal stakeholders for reassignment review.
Assist with External Attack Surface Management findings by identifying asset ownership, coordinating remediation, and supporting owner mapping.
Support immediate follow-up for critical vulnerabilities that may affect external security ratings or business risk indicators.
As experience develops, support selected security engineering activities under guidance, including security configuration assessment, asset onboarding validation, approved security template review, tooling issue coordination, and process improvement or automation initiatives.
Take ownership of assigned tasks and follow them through to closure; communicate clearly with internal teams, asset owners, and requestors; follow procedures and escalate issues when required; and maintain accuracy in reporting, tickets, and evidence handling.