Vulnerability Management Engineer

Infosys Pontoon • Boston, MA

4h • Hybrid

About The Position

This role is responsible for driving end-to-end ownership of tooling, integrations, and processes that enable comprehensive visibility into vulnerabilities and configuration risks across on-premises, cloud, and hybrid environments. The engineer ensures that vulnerability and configuration data is accurate, complete, and actionable, enabling risk-based prioritization and effective remediation across the enterprise. This includes oversight of vulnerability management platforms, troubleshooting tool issues, and collaborating with cross-functional teams to enhance detection, reporting, and response capabilities. In addition, the VClientA Engineer develops and maintains scalable dashboards, metrics, and executive reporting to provide transparency into risk posture, remediation progress, and control effectiveness. The role is instrumental in driving automation, process improvement, and governance alignment, ensuring compliance with regulatory frameworks such as NIST, CIS, ISO, and NY DFS. As a senior technical resource, the engineer provides subject matter expertise, mentoring, and strategic guidance, translating complex technical risks into clear, actionable insights for both technical teams and executive leadership.

Requirements

• Deep hands-on experience managing and optimizing enterprise vulnerability management platforms (e.g., Qualys, Wiz, Nessus, Rapid7), including platform configuration, performance tuning, and data quality management.
• Experience designing and implementing integrations between vulnerability platforms and enterprise systems (e.g., ServiceNow CMDB, SecOps, SIEM).
• Strong proficiency in automation and orchestration using scripting languages (e.g., Python, PowerShell).
• Advanced understanding of operating systems, secure configuration baselines, and continuous compliance validation.
• Ability to develop and maintain dashboards and metrics for vulnerability trends, remediation performance, and risk posture.
• Experience securing modern environments, including cloud platforms (AWS, Azure, GCP) and hybrid infrastructures, with a focus on vulnerability and configuration risk management.
• Strong ability to identify tool defects, perform root cause analysis, and work with vendors to resolve issues and improve platform effectiveness.
• 8-10 years of experience in Cyber Security with a focus on Vulnerability Management.

Responsibilities

• Driving end-to-end ownership of tooling, integrations, and processes for vulnerability and configuration risk visibility.
• Ensuring vulnerability and configuration data is accurate, complete, and actionable for risk-based prioritization and remediation.
• Overseeing vulnerability management platforms and troubleshooting tool issues.
• Collaborating with cross-functional teams to enhance detection, reporting, and response capabilities.
• Developing and maintaining scalable dashboards, metrics, and executive reporting.
• Driving automation, process improvement, and governance alignment.
• Ensuring compliance with regulatory frameworks (NIST, CIS, ISO, NY DFS).
• Providing subject matter expertise, mentoring, and strategic guidance.
• Translating complex technical risks into actionable insights for technical teams and executive leadership.

What This Job Offers

• Career Level: Senior
• Education Level: No Education Listed