Cybersecurity Vulnerability Engineer

Build stronger visibility and faster remediation while supporting a Department of Defense customer at Fort Bragg, NC (onsite). This role focuses on deploying and operating vulnerability scanning across hybrid environments, validating findings to reduce false positives, and creating automation workflows that connect detection to CI/CD and remediation. You will work with modern security tooling and emerging exposure-management needs, aligned to NIST and industry frameworks.

What you’ll do

• Deploy and maintain vulnerability scanning tools across network, application, cloud, container, and endpoint environments.
• Run authenticated and unauthenticated scans across hybrid infrastructure and tune configurations for accuracy and coverage.
• Validate vulnerabilities using technical analysis, PoC testing, and manual verification to reduce false positives.
• Assess exploitability by evaluating reachability, control effectiveness, and attack-path feasibility.
• Perform root-cause analysis for recurring or systemic vulnerabilities and propose engineering-level fixes.
• Create remediation playbooks, secure configuration baselines, and hardening standards.
• Automate workflows using Python, PowerShell, Bash, APIs, and integrations with CI/CD, cloud platforms, and ticketing systems.
• Integrate vulnerability detection into CI/CD, IaC pipelines, and pre-production environments.
• Support remediation validation through re-scanning, configuration checks, and targeted testing.
• Improve attack surface discovery for internet-facing, ephemeral, and cloud-native assets.
• Identify gaps in scanning coverage, asset visibility, or control validation, then propose improvements.
• Design guardrails and baselines to reduce vulnerability recurrence and support engineering teams in implementation.
• Assist incident response during vulnerability surge events with rapid scanning and technical remediation support.
• Maintain accurate asset-to-vulnerability mappings to support analytics and automation.
• Evaluate emerging technologies and support adoption of new scanning and exposure-management capabilities.
• Assess vulnerabilities in AI/ML/LLM platforms and other emerging technologies.
• Ensure work aligns with NIST and industry frameworks including NIST SP 800-40, NIST SP 800-53, and CIS Controls.

Required qualifications

• DoD Active TS/SCI Clearance.
• Bachelor’s Degree with a minimum 7 years of experience in Cybersecurity or equivalent.
• Strong understanding of operating systems, networking, cloud platforms, and application architectures.
• Hands-on experience with vulnerability scanners and configuration assessment tools, plus security automation.
• Proficiency in scripting languages such as Python, PowerShell, or Bash.
• Ability to read and understand exploit code, advisories, and configuration weaknesses.
• Strong troubleshooting and systems analysis skills.
• Experience integrating security tools with CI/CD, cloud APIs, or infrastructure-as-code workflows.
• Experience with container security, Kubernetes, or cloud-native scanning.
• Familiarity with attack-path analysis or exposure-management platforms.
• Experience building custom detection logic or performing PoC exploit validation.
• Knowledge of AI/ML/LLM platform security and emerging technology risks.

Preferred certifications

• DoD 8570 / 8140 compliant certification such as: CISSP, SecurityX, CySA+, GIAC.

Tools and technologies you’ll work with

Python, PowerShell, Bash, APIs, CI/CD, IaC, cloud platforms, ticketing systems, Kubernetes, AI/ML/LLM, NIST SP 800-40, NIST SP 800-53, CIS Controls

Compensation and schedule

USD 85,800 - 180,200 per year. This is an onsite role at Fort Bragg, NC. Up to 10% travel within the Continental US.

Benefits

• Healthcare
• Wellness
• Financial
• Retirement
• Family support
• Continuing education
• Time off benefits

The successful candidate must be a self-starter with an advanced level.