Vulnerability Management Engineer

Cook Systems • Atlanta, GA

4h • Hybrid

About The Position

The Vulnerability Management Engineer is responsible for assessing, managing, and reducing security vulnerabilities across enterprise server and workstation environments. This role involves performing scheduled vulnerability scans, evaluating risks, recommending remediation plans, supporting patch cycles, and developing reports that improve the organization’s security maturity.

Requirements

• 3–7 years’ experience in vulnerability management, patch management, or endpoint/server security operations.
• Demonstrated technical proficiency with Windows Server and Windows desktop platforms, patch deployment, and configuration management.
• Experience operating one or more security scanning platforms (e.g., Qualys, Defender, Azure Update Manager, PatchMyPC, etc.).
• Ability to analyze scan output, identify false positives, and communicate meaningful remediation guidance.
• Strong understanding of CVEs, CVSS scoring, and exploitability assessments, as well as common ransomware and threat vectors targeting enterprise endpoints.
• Strong written and verbal communication skills.
• Ability to translate technical risk into business impact.
• Comfortable working independently and making data-based recommendations.
• Able to coordinate across multiple IT and security teams.

Responsibilities

• Perform recurring vulnerability scans for servers and workstation environments.
• Analyze scan results to identify actionable risks, false positives, and system exposure levels.
• Prioritize vulnerabilities based on industry frameworks (CVSS, KEV, CISA, etc.).
• Coordinate with application owners for patching and remediation scheduling.
• Partner with server and desktop teams to support monthly and quarterly patching cycles.
• Provide technical guidance on workarounds, hotfixes, or remediation configuration issues.
• Assist in validating remediation success post-deployment.
• Develop weekly, monthly, and quarterly dashboards on remediation progress, aging vulnerabilities, SLA/KPI compliance tracking, and platform-level trends.
• Operate and tune vulnerability scanning and endpoint management tools (e.g., Qualys, Microsoft Defender, Intune, etc.).
• Ensure systems adhere to organization security policies, CIS benchmarks, NIST guidance, and other relevant frameworks.

Benefits

• Choose from two comprehensive medical plans through Blue Cross Blue Shield, with dental and vision coverage included.
• Protect what matters most with life, critical illness, and accident insurance through Unum—because your family’s security matters.
• Plan ahead and save with a Flexible Spending Account and Daycare FSA through Navia, helping you manage healthcare and dependent-care expenses your way.
• Our Health Gap Insurance through Sun Life helps cover unexpected costs, so you’re never caught off guard.
• Build your future with our 401(k) plan through The Standard. You’re eligible after just six months—because long-term success deserves a strong foundation.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed
• Number of Employees: 101-250 employees