Vulnerability Management Engineer

Deepwatch • Tampa, FL

13h • Hybrid

About The Position

Come join Deepwatch’s team of world-class cybersecurity professionals and the brightest minds in the industry. If you're ready to challenge yourself with work that matters, then this is the place for you. We're redefining cybersecurity as one of the fastest growing companies in the U.S. – and we have a blast doing it! Who We Are Our core values drive everything we do at Deepwatch, including our approach to tackling tough cyber challenges. We seek out tenacious individuals who are passionate about solving complex problems and protecting our customers. At Deepwatch, every decision, process, and hire is made with a focus on improving our cybersecurity solutions and delivering an exceptional experience for our customers. By embracing our values, we create a culture of excellence that is dedicated to empowering our team members to explore their potential, expand their skill sets, and achieve their career aspirations, which is supported by our unique annual professional development benefit. Deepwatch recognition includes: 2025, 2024, 2023, 2022 and 2021 Great Place to Work® Certified 2024 Military Times Best for Vets Employers 2024 US Department of Labor Hire Vets Gold Award 2024 Forbes' America's Best Startup Employers 2024 Cyber Defense Magazine, Global Infosec Awards 2023 and 2022 Fortress Cybersecurity Award 2023 $180M Series C investment from Springcoast Capital Partners, Splunk Ventures, and Vista Credit Partners of Vista Equity Partners 2022 Cybersecurity Excellence Award for MDR Vulnerability Management Engineer Hybrid, Tampa, FL Reporting to the Senior Manager, Platform Security Services, the Vulnerability Management Engineer will be responsible for overseeing the operation of vulnerability assessments for assigned customers, implement and oversee scanning technologies to discover, prioritize security flaws for remediation, and collaborate with system/application owners to facilitate the remediation and closure of vulnerabilities. The Vulnerability Management Engineer will operationally integrate with the customer’s patch management activities and perform validation of applied and/or missing patches. Additionally, they will perform security testing on pre-production systems and applications to close vulnerabilities prior to production deployment. In this role, you’ll get to own: Vulnerability Lifecycle & Managed Services Deliver vulnerability management as a service, overseeing multiple workstreams while meeting specific service-level (SLA) commitments. Manage the full remediation lifecycle by collaborating with infrastructure and application owners on security hot-fixes and patch validation. Perform discovery and grouping of network-connected systems to ensure comprehensive scanning across networks, OSs, apps, and databases. Conduct regular scans on both production and pre-production deployments to identify flaws before and after release. Create remediation reports and dashboards to track vulnerabilities and remediations Assist with attestation scan and compliance report Risk Analysis & Technical Strategy Analyze vulnerabilities to filter false positives and prioritize remediation based on the actual risk of exploitation. Develop remediation action plans and generate tickets for system owners to address identified flaws. Speak in-depth on hardening guidelines (NIST, CIS) and implement mitigation factors (Firewalls, IDS/IPS) to reduce risk when patching isn't immediate. Analyze new technologies, zero-day threats, and reviews of new technology released by supported vendors to provide mitigation strategies. Operations, Mentorship & Documentation Develop and document Standard Operating Procedures (SOPs) and assist in maintaining automation and scripting tools. Support cyber incident response teams with vulnerability discovery and identification during crisis management. Mentor, coach, and train other team members while producing educational content like blog posts and vulnerability summary sheets for customers. Handle customer escalations regarding technology or remediation issues to ensure successful service delivery.

Requirements

• Demonstrate strong customer service and communication skills, both oral and written with the ability to build relationships at all levels
• Possess experience, and demonstrated success, developing and managing an organizational vulnerability management program
• Demonstrate fundamental knowledge of network vulnerability scanning technologies
• Demonstrate an understanding of Web Application Security vulnerabilities and mitigating defenses
• Possess experience with vulnerability remediation management and patching
• Have knowledge of vulnerability management best practices from NIST, ISO, PCI, OWASP, and CIS
• Possess experience in deploying and operating vulnerability scanning infrastructure, services and solutions
• Leverage fundamental technical skills in the following areas: Active Directory Windows Linux Networking
• Are proficient in the use of data manipulation, dashboard and reporting tools
• Have earned industry recognized certifications, such as GEVA, CISSP, CISM, GPEN, GIAC, CISA, etc.

Nice To Haves

• Possess security consulting or managed services experience

Responsibilities

• Deliver vulnerability management as a service, overseeing multiple workstreams while meeting specific service-level (SLA) commitments.
• Manage the full remediation lifecycle by collaborating with infrastructure and application owners on security hot-fixes and patch validation.
• Perform discovery and grouping of network-connected systems to ensure comprehensive scanning across networks, OSs, apps, and databases.
• Conduct regular scans on both production and pre-production deployments to identify flaws before and after release.
• Create remediation reports and dashboards to track vulnerabilities and remediations
• Assist with attestation scan and compliance report
• Analyze vulnerabilities to filter false positives and prioritize remediation based on the actual risk of exploitation.
• Develop remediation action plans and generate tickets for system owners to address identified flaws.
• Speak in-depth on hardening guidelines (NIST, CIS) and implement mitigation factors (Firewalls, IDS/IPS) to reduce risk when patching isn't immediate.
• Analyze new technologies, zero-day threats, and reviews of new technology released by supported vendors to provide mitigation strategies.
• Develop and document Standard Operating Procedures (SOPs) and assist in maintaining automation and scripting tools.
• Support cyber incident response teams with vulnerability discovery and identification during crisis management.
• Mentor, coach, and train other team members while producing educational content like blog posts and vulnerability summary sheets for customers.
• Handle customer escalations regarding technology or remediation issues to ensure successful service delivery.

Benefits

• Medical, dental, vision, and disability insurance
• Flexible Time Off (FTO), 12 company holidays, sick leave and 8-Weeks Paid Parental Leave
• Unique professional development benefits with Annual “development dollars” to support our people growth and development
• Wellness contests and monthly educational programs
• 401(K) retirement program

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed