Threat & Vulnerability Management Security Engineer I

AmTrust Financial Services is seeking a Threat & Vulnerability Management Security Engineer I to support vulnerability identification, prioritization, remediation, and verification across the organization.

Responsibilities

• Support the vulnerability management lifecycle, including vulnerability identification, validation, remediation tracking, verification, and reporting.
• Review and analyze vulnerability scan results to identify and prioritize security risks.
• Assist with operating and maintaining vulnerability assessment tools to support accurate asset coverage and vulnerability visibility.
• Track remediation activities and follow up with technology teams to ensure vulnerabilities are addressed within established timelines.
• Research vulnerabilities, security advisories, threat intelligence, and industry best practices to understand emerging risks.
• Assist with vulnerability assessments across on-premises, cloud, and hybrid environments.
• Support asset inventory and ownership validation efforts to improve vulnerability tracking and visibility.
• Develop and maintain security integrations, automation, and workflows to enhance vulnerability management and risk visibility.
• Assist with dashboards, reports, and metrics related to vulnerability management activities.
• Participate in vulnerability validation and verification activities to confirm successful remediation.
• Contribute to process improvement initiatives and automation efforts that increase program efficiency and effectiveness.
• Partner with infrastructure, application, cloud, and other technology teams to support remediation efforts.
• Assist with documentation and tracking of vulnerability exceptions, compensating controls, and risk acceptance decisions.
• Support the development and maintenance of vulnerability management procedures, standards, and operational documentation.
• Help prepare reporting materials for operational reviews and security governance activities.
• Assist with audit and compliance activities by collecting and organizing supporting documentation and evidence.
• Monitor vulnerability disclosures, vendor security advisories, and emerging threats to identify potential organizational impacts.
• Escalate critical findings and remediation challenges to senior team members when appropriate.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Computer Engineering, Cybersecurity, or a related field, or equivalent relevant professional experience.
• 1-3 years of experience in cybersecurity, vulnerability management, security operations, or a related technical role.
• Solid understanding of vulnerability management concepts, remediation processes, and risk-based prioritization.
• Experience with or exposure to vulnerability management platforms such as Tenable, Qualys, Rapid7, or Microsoft Defender Vulnerability Management.
• Familiarity with common security frameworks and standards including CVE, CVSS, and CISA Known Exploited Vulnerabilities (KEV).
• Working knowledge of Windows, Linux, networking, cloud platforms, and enterprise technology environments.
• Strong analytical, organizational, and communication skills with the ability to collaborate across technical teams.
• Relevant certifications such as Security+, CySA+, or similar certifications are preferred.

Technologies

• Tenable
• Qualys
• Rapid7
• Microsoft Defender Vulnerability Management
• CVE
• CVSS
• CISA Known Exploited Vulnerabilities (KEV)
• Windows
• Linux

Benefits

• Medical & Dental Plans
• Life Insurance, including eligible spouses & children
• Health Care Flexible Spending
• Dependent Care
• 401k Savings Plans
• Paid Time Off

Location: Cleveland, OH (onsite)

What we offer:

• Competitive compensation package and career advancement opportunities.
• Diverse and inclusive culture where employee thoughts and ideas are appreciated and respected.
• Commitment to excellence and recognition that diverse backgrounds, skills, and perspectives help sustain a competitive advantage.