Vulnerability Management Engineer

General Dynamics Mission Systems, Inc•Scottsdale, AZ

8h•$112,924 - $125,275

About The Position

The Vulnerability Management Engineer performs technical execution and coordination of vulnerability remediation and patch management across Windows, Linux, and Cisco operating systems, network infrastructure, and security appliances in offline, air-gapped, and restricted-access environments. The role uses Tenable Nessus and Tenable Security Center+ to analyze findings, determine remediation requirements, map devices to patches, coordinate patch testing, troubleshoot installation failures, and validate remediation effectiveness. It also involves researching vendor advisories and manufacturer security releases. The engineer coordinates patch qualification through integration and pre-production laboratories, prepares approved patch packages and deployment instructions for remote production implementation teams, tracks remediation progress, evaluates deployment outcomes, maintains technical documentation, and produces status reports and compliance evidence. The position follows established procedures and delegated authority, escalating complex technical issues, significant operational risks, and exceptions requiring senior-level review. The role also maintains and improves standard procedures and technical guides, develops or modifies authorized scripts and utilities, identifies opportunities to improve data quality and operational efficiency, recommends updates to qualification procedures, and provides technical guidance to junior team members. A Bachelor’s degree in Engineering or a related Science or Mathematics field and at least five years of relevant experience are required, or a Master’s degree and at least three years of relevant experience. A Department of Defense Secret clearance must be obtainable within a reasonable time; U.S. citizenship is required.

Requirements

Bachelor’s degree in Engineering or a related Science or Mathematics field and at least 5 years of relevant experience, or a Master’s degree and at least 3 years of relevant experience.
A Department of Defense Secret security clearance must be obtainable within a reasonable time; selected applicants must meet eligibility requirements for classified information access.
U.S. citizenship is required due to the nature of the work performed at company facilities.
Working knowledge of vulnerability management, manual and automated patch management, and security remediation processes.
Practical experience interpreting Nessus findings and correlating vulnerabilities with applicable remediation guidance.
Working knowledge of Windows, Linux, and Cisco patch installation, system administration, and troubleshooting.
Ability to independently execute established technical procedures and resolve routine to moderately complex technical issues.
Understanding of patch prerequisites, dependencies, testing requirements, and post-installation validation.
Ability to compare pre-remediation and post-remediation scan results and document remediation effectiveness.
Experience maintaining technical records, remediation tracking data, installation logs, and compliance evidence.
Ability to prepare technical reports and communicate findings to technical personnel and management.
Ability to work effectively with remote teams in controlled, restricted-access, or disconnected environments.
Hold or have held CySA+.
Experience with Bash, PowerShell, and Batch scripting.
Hold or have held Linux+, LPIC-1, RHCSA, or RHCSE.
Intermediate Excel skills, including Tables, PivotTables, Power Query, PowerPivot, and Slicers.
Intermediate Word skills, including References and Review tabs.
Experience with Solaris SPARC operating systems.

Nice To Haves

Experience updating Cisco firewalls, switches, and routers.
Experience with setup of Windows Server Update Services (WSUS).
Experience with Microsoft Configuration Manager (ConfigMgr/MECM/SCCM).
Experience using Red Hat Satellite.
Experience setting up Ansible Automation.
Experience setting up a WinGet Server.
Experience setting up an RHEL repository mirror.
Working knowledge of IBM ClearQuest.
Working knowledge of IBM ClearCase.
Basic working knowledge of relational databases, including relationship types and basic querying.
Working knowledge of Plans of Action and Milestones (POA&M/POAM).

Responsibilities

Execute established patch testing procedures in initial integration and final pre-production laboratory environments.
Validate patch installation success, prerequisites, service functionality, system stability, and compatibility with target environments.
Perform pre-installation and post-installation checks and document test results, errors, anomalies, and remediation steps.
Troubleshoot routine and moderately complex patch installation failures and identify likely causes.
Assess test results against acceptance criteria and prepare evidence-based recommendations for release or further investigation.
Identify patches requiring additional testing, revised instructions, or coordination with system owners.
Maintain and refine standard operating procedures, patching work instructions, troubleshooting guides, and validation checklists.
Develop or modify authorized scripts and utilities for patching, data collection, validation, reporting, and remediation tracking.
Identify opportunities to improve vulnerability data quality, reduce manual tracking, standardize deployment evidence, and increase efficiency.
Recommend improvements to patch qualification procedures based on observed failures, recurring vulnerabilities, and laboratory or production feedback.
Provide technical guidance to junior team members on established procedures, documentation, and routine troubleshooting.
Share lessons learned and contribute to continuous improvement of the vulnerability remediation lifecycle.
Analyze vulnerability findings using Tenable Nessus and Tenable Security Center+, determine remediation requirements, and develop device-to-patch mappings.
Coordinate patch testing and qualification, prepare approved patch packages and deployment instructions, and support remote production implementation teams.
Research vendor advisories and manufacturer security releases.
Track remediation progress, evaluate deployment outcomes, maintain technical documentation, and produce status reports and compliance evidence.
Escalate complex technical issues, significant operational risks, and exceptions requiring senior-level review.