Vulnerability Management Systems Engineer

Federal Home Loan Bank of Pittsburgh•Pittsburgh, PA

About The Position

The Vulnerability Management Systems Engineer strengthens the organization’s security posture by evaluating and remediating system, application, and infrastructure vulnerabilities across on‑premises and cloud environments. The role combines technical analysis, hands‑on engineering, risk evaluation, and cross‑team collaboration to support secure operational practices. It spans the full vulnerability management lifecycle—discovery, assessment, remediation, and reporting—while guiding remediation strategies, creating repeatable validation processes, improving automation, and monitoring system behavior to ensure stability and resilience against evolving threats. Primary Success Factors Analyze identified vulnerabilities to determine potential impact and required remediation actions. Collaborate with infrastructure and application teams to coordinate remediation activities, ensuring changes are tested and validated thoroughly. Develop frameworks and workflows that guide consistent vulnerability remediation practices across servers, applications, and cloud environments. Assist in automating assessment and remediation routines where possible, improving efficiency and reliability. Monitor systems during remediation efforts to confirm stability, performance, and successful implementation of patches or configuration changes. Maintain awareness of emerging threats, industry trends, and evolving attacker tactics; recommend updates to remediation approaches accordingly. Contribute to secure configuration baselines and support the engineering of hardened templates for virtual, physical, and cloud systems. Support operational excellence by troubleshooting system issues related to remediation, performance, or availability. Generate clear reporting and visibility into vulnerability trends, remediation progress, and risk reduction activities. Ensure alignment with organizational policies, regulatory expectations, and security best practices. Monitor AI-enabled systems for performance and reliability during remediation and adjust strategies based on real-time insights and predictive analytics. Collaborate with technical teams to integrate AI solutions into existing processes, ensuring continuous improvement and adaptation to evolving threat landscapes. Develop and refine automated workflows for provisioning, updating, and hardening virtual machines and cloud resources, leveraging Terraform modules and best practices. Continuously improve image templates and deployment pipelines to align with organizational standards and evolving security requirements.

Requirements

Bachelor of Science degree in Information Systems or equivalent work experience
Five years of experience in technical support role, including three years of experience as a system administrator for Windows
Demonstrated networks, operating systems, system monitoring, security and technology infrastructure experience; specializing in one or more technical areas where a thorough and detailed understanding of the environment is required, and certification in areas of specialization is preferred
Demonstrated analytical skills with creative innovative approaches to problem-solving
Strong communication and presentation skills, ability to function as a member of a team and ability to manage multiple projects and tasks concurrently
Knowledge of sound, industry-accepted server software support practices and methodologies
Experience with vulnerability analysis, patch assessment and vulnerability scoring tools
Knowledge of vulnerability scoring systems (CVSS Scores)
Proven analytical and troubleshooting abilities across performance, availability, and security scenarios.
Effective communicator able to collaborate across technical teams and manage multiple priorities in a fast-moving environment.
Experience with modern automation and engineering practices (Terraform, CI/CD, AI-driven tooling preferred).

Responsibilities

Analyze identified vulnerabilities to determine potential impact and required remediation actions.
Collaborate with infrastructure and application teams to coordinate remediation activities, ensuring changes are tested and validated thoroughly.
Develop frameworks and workflows that guide consistent vulnerability remediation practices across servers, applications, and cloud environments.
Assist in automating assessment and remediation routines where possible, improving efficiency and reliability.
Monitor systems during remediation efforts to confirm stability, performance, and successful implementation of patches or configuration changes.
Maintain awareness of emerging threats, industry trends, and evolving attacker tactics; recommend updates to remediation approaches accordingly.
Contribute to secure configuration baselines and support the engineering of hardened templates for virtual, physical, and cloud systems.
Support operational excellence by troubleshooting system issues related to remediation, performance, or availability.
Generate clear reporting and visibility into vulnerability trends, remediation progress, and risk reduction activities.
Ensure alignment with organizational policies, regulatory expectations, and security best practices.
Monitor AI-enabled systems for performance and reliability during remediation and adjust strategies based on real-time insights and predictive analytics.
Collaborate with technical teams to integrate AI solutions into existing processes, ensuring continuous improvement and adaptation to evolving threat landscapes.
Develop and refine automated workflows for provisioning, updating, and hardening virtual machines and cloud resources, leveraging Terraform modules and best practices.
Continuously improve image templates and deployment pipelines to align with organizational standards and evolving security requirements.