Threat & Vulnerability Management

Threat & Vulnerability Management Engineer Jobs

2 jobs found

Today

Threat & Vulnerability Management Security Engineer I

AmTrust Financial Services, Inc. Cleveland, OH

Cleveland, OH

Today

Full time Cisa Kev Cybersecurity Operations Cybersecurity Tools

Apply Now

Job Description

AmTrust Financial Services is seeking a Threat & Vulnerability Management Security Engineer I to support vulnerability identification, prioritization, remediation, and verification across the organization.

Responsibilities

Support the vulnerability management lifecycle, including vulnerability identification, validation, remediation tracking, verification, and reporting.
Review and analyze vulnerability scan results to identify and prioritize security risks.
Assist with operating and maintaining vulnerability assessment tools to support accurate asset coverage and vulnerability visibility.
Track remediation activities and follow up with technology teams to ensure vulnerabilities are addressed within established timelines.
Research vulnerabilities, security advisories, threat intelligence, and industry best practices to understand emerging risks.
Assist with vulnerability assessments across on-premises, cloud, and hybrid environments.
Support asset inventory and ownership validation efforts to improve vulnerability tracking and visibility.
Develop and maintain security integrations, automation, and workflows to enhance vulnerability management and risk visibility.
Assist with dashboards, reports, and metrics related to vulnerability management activities.
Participate in vulnerability validation and verification activities to confirm successful remediation.
Contribute to process improvement initiatives and automation efforts that increase program efficiency and effectiveness.
Partner with infrastructure, application, cloud, and other technology teams to support remediation efforts.
Assist with documentation and tracking of vulnerability exceptions, compensating controls, and risk acceptance decisions.
Support the development and maintenance of vulnerability management procedures, standards, and operational documentation.
Help prepare reporting materials for operational reviews and security governance activities.
Assist with audit and compliance activities by collecting and organizing supporting documentation and evidence.
Monitor vulnerability disclosures, vendor security advisories, and emerging threats to identify potential organizational impacts.
Escalate critical findings and remediation challenges to senior team members when appropriate.

Requirements

Bachelor’s degree in Computer Science, Information Technology, Computer Engineering, Cybersecurity, or a related field, or equivalent relevant professional experience.
1-3 years of experience in cybersecurity, vulnerability management, security operations, or a related technical role.
Solid understanding of vulnerability management concepts, remediation processes, and risk-based prioritization.
Experience with or exposure to vulnerability management platforms such as Tenable, Qualys, Rapid7, or Microsoft Defender Vulnerability Management.
Familiarity with common security frameworks and standards including CVE, CVSS, and CISA Known Exploited Vulnerabilities (KEV).
Working knowledge of Windows, Linux, networking, cloud platforms, and enterprise technology environments.
Strong analytical, organizational, and communication skills with the ability to collaborate across technical teams.
Relevant certifications such as Security+, CySA+, or similar certifications are preferred.

Technologies

Tenable
Qualys
Rapid7
Microsoft Defender Vulnerability Management
CVE
CVSS
CISA Known Exploited Vulnerabilities (KEV)
Windows
Linux

Benefits

Medical & Dental Plans
Life Insurance, including eligible spouses & children
Health Care Flexible Spending
Dependent Care
401k Savings Plans
Paid Time Off

Location: Cleveland, OH (onsite)

What we offer:

Competitive compensation package and career advancement opportunities.
Diverse and inclusive culture where employee thoughts and ideas are appreciated and respected.
Commitment to excellence and recognition that diverse backgrounds, skills, and perspectives help sustain a competitive advantage.

View full job page →

Today

Threat & Vulnerability Management Security Engineer II

AmTrust Financial Services, Inc. Cleveland, OH

Cleveland, OH

Today

Full time Cis Cybersecurity Tooling Cloud Platforms Cybersecurity Operations

Apply Now

Job Description

Reduce enterprise technology risk by owning a Vulnerability Management Program that goes beyond scanning. In this onsite role in Cleveland, OH, you will continuously identify, assess, prioritize, remediate, and manage vulnerabilities across IT environments, while using threat intelligence and risk-based decision making to focus on what matters most.

What you’ll do

Own and continuously evolve the enterprise Vulnerability Management Program across the IT environment.
Manage the end-to-end vulnerability lifecycle, including discovery, validation, risk prioritization, remediation tracking, exception management, verification, and reporting.
Analyze threat actors, campaigns, industry trends, and emerging cyber risks to provide strategic threat intelligence that informs vulnerability prioritization and broader security and business decisions.
Operate and optimize vulnerability assessment technologies to maintain comprehensive asset coverage, accurate findings, and actionable risk visibility.
Correlate and prioritize findings across vulnerability management platforms, attack surface management solutions, and threat intelligence sources.
Apply risk-based prioritization using CVSS, CISA Known Exploited Vulnerabilities (KEV), exploitability, asset criticality, exposure, and business impact.
Partner with asset management and technology teams to improve asset inventory accuracy, security coverage, ownership attribution, and enterprise risk visibility.
Design, develop, and maintain security automation capabilities that streamline vulnerability management and related security operations while maintaining appropriate governance and oversight.
Build and enhance integrations, workflows, and tooling across security platforms to automate repetitive tasks and enable scalable, end-to-end security operations.
Coordinate remediation efforts across infrastructure, application, cloud, network, and other technical teams to align with established service-level objectives and risk severity.
Lead coordinated response activities for critical vulnerabilities, zero-day threats, and actively exploited CVEs, including rapid assessment, prioritization, remediation, and risk communication.
Manage vulnerability exceptions, compensating controls, risk acceptance processes, and periodic exception reviews to keep risks documented and governed.
Develop and maintain vulnerability management policies, standards, procedures, runbooks, and reporting frameworks.
Develop executive and operational metrics for risk reduction, remediation performance, vulnerability trends, asset coverage, SLA adherence, exception exposure, and mean time to remediate (MTTR).
Support audits, compliance assessments, and enterprise risk management through accurate documentation, reporting, and evidence collection.
Monitor emerging vulnerabilities, exploitation trends, threat intelligence, and industry best practices to keep program effectiveness and prioritization current.

What you bring

Bachelor’s degree in Computer Science, Information Technology, Computer Engineering, Cybersecurity, or a related field, or equivalent relevant professional experience.
3+ years managing enterprise vulnerability management programs across on-premises, cloud, and hybrid environments.
Hands-on experience with vulnerability management platforms such as Tenable, Qualys, Rapid7, and Microsoft Defender VM, plus vulnerability assessment, validation, prioritization, and remediation practices.
Strong understanding of vulnerability and threat intelligence frameworks, including CVE, CVSS, CISA KEV, exploit intelligence, attack surface management, and risk-based decision making.
Experience securing modern technology environments including Azure, AWS, and GCP, cloud-native workloads, and containerized applications. Relevant certifications are preferred, such as CISSP, CySA+, GCVA, GSEC, GCSA, GCTI, or OSCP.

Tools and technologies

Tenable, Qualys, Rapid7, Microsoft Defender VM
CVE, CVSS, CISA Known Exploited Vulnerabilities (KEV)
Attack surface management
Azure, AWS, GCP, containerized applications
CISSP, CySA+, GCVA, GSEC, GCSA, GCTI, OSCP

Benefits

Medical & Dental Plans
Life Insurance, including eligible spouses & children
Health Care Flexible Spending
Dependent Care
401k Savings Plans
Paid Time Off

How AmTrust supports your growth

AmTrust Financial Services offers a competitive compensation package and excellent career advancement opportunities. The company is focused on building a diverse and inclusive culture where employees’ thoughts and ideas are appreciated and respected. Diversity is treated as a business imperative to attract, retain, and develop the best talent.

View full job page →

Threat & Vulnerability Management Engineer Jobs

Threat & Vulnerability Management Security Engineer I

Threat & Vulnerability Management Security Engineer II

Get Threat & Vulnerability Management Engineer Jobs alerts