Own and strengthen corporate security across identity, endpoints, networks, and third-party systems, reducing risk through security controls, vulnerability management, incident response, and cross-functional partnership.
Information Vulnerability Management Engineer
📜 Description
- Manage vulnerability scanning, maintain asset coverage, and validate findings.
- Prioritize vulnerabilities by severity, exploitability, exposure, and business impact; monitor emerging threats and coordinate remediation or compensating controls.
- Coordinate endpoint, server, and third-party application patching, including deployment validation, testing, and change approvals.
- Work with infrastructure and software engineering teams to assign remediation, track deadlines, escalate overdue findings, and verify fixes through rescanning.
- Remediate vulnerabilities using Intune, Active Directory Group Policy, Automox, and PowerShell, following testing and change-management processes.
- Report vulnerability trends and risks, improve the vulnerability management lifecycle, and participate in on-call security alert and incident response.
🛠️ Requirements
- 1-3 years of experience in a similar infrastructure or security role
- Working knowledge of Intune, Automox, Active Directory Group Policy, and PowerShell scripting
- Hands-on experience with patch management, deployment, and reporting
- Good working knowledge of current IT risks and experience implementing security solutions
- Experience administering and securing Windows Server, Windows 10 and 11, and macOS
- Effective troubleshooting skills and ability to solve complex problems
- Strong attention to detail and analytical skills
- Excellent interpersonal and communication skills
- Ability to work under pressure and meet tight deadlines
- Repetitive motions that include the wrists, hands and/or fingers
✨ Benefits
- Paid time off
- Holiday pay
- Holiday of choice
- 401(k) match
- Life insurance
- Short-term disability
- Health insurance
- Dental insurance
Full job description
The Vulnerability Management Engineer is responsible for administering and enhancing the organization's vulnerability management program by identifying, assessing, prioritizing, and driving remediation of security vulnerabilities across IT systems. This role minimizes risk and threat exposure by identifying, prioritizing, and remediating vulnerabilities in accordance with our security policies. Technical skills, attention to detail, and proactive approach will be essential in safeguarding our information technology infrastructure.
We prefer this position be housed within 60-90 minutes of our North Jackson, OH Fulfillment facility to work a hybrid schedule.
If we hire fully remote the chosen candidate will be required to travel to our North Jackson, OH facility (company paid) their first few days for new hire orientation, training, and onboarding.
At this time, we are NOT considering applicants that require immigration sponsorship (additional work authorization or permanent work authorization) now or in the future to work in the United States. This includes, but IS NOT LIMITED TO: F1-OPT, F1-CPT, H-1B, TN, L-1, J-1, etc.
Salary range: $89,000-94,000 plus 10% bonus target
Benefits
Our employees enjoy a generous package of benefits that we are thrilled to provide, and feel is part of what makes us different as an employer. We value our team members, and this is one way we can show it.
Benefits include:
-PTO, holiday pay and holiday of choice
-401(k) match
-Life insurance
-Short-term disability
-Health, dental and vision insurance
-Maternity/paternity leave
-Health savings account (HSA)
-Flex spending accounts (FSA) – health and dependent
Position Responsibilities may include, but not limited to:
Required Skills and Experience
Preferred Skills and Experience
Physical Requirements
- Repetitive motions that include the wrists, hands and/or fingers
- Sedentary work that primarily involves sitting, remaining in a stationary position for prolonged periods
- Visual perception to perform job including peripheral vision, depth perception, and the ability to adjust focus
Similar jobs
Search more Cybersecurity Engineer jobsSecure NestJS and TypeScript applications and identity integrations by finding and mitigating vulnerabilities, reviewing OAuth/OIDC flows, and helping engineering teams build secure-by-default software.
Design and mature security controls for AI systems across products and the enterprise, assess AI/ML threats, build defensive tooling, and help engineering teams integrate security throughout the AI lifecycle.
Secure cloud and non-cloud systems through security operations, architecture reviews, risk assessments, and remediation, while collaborating across engineering, GRC, and third-party risk teams.
Secure cloud infrastructure and application platforms by designing and enforcing security controls, hardening infrastructure, and improving detection and incident response across engineering teams.
