IT Security Engineer (Vulnerability Management)

Location: On-site in Chelmsford, Massachusetts; applicants must reside within a reasonable commuting distance. Relocation is not offered.

Annual salary: $108,100–$129,000

Company

hirify.global develops medical devices, software, and related services for diagnosing and treating serious cardiopulmonary and respiratory conditions.

What you will do

• Operate, administer, and improve enterprise vulnerability management platforms, including Tenable.
• Define scanning strategies for servers, workstations, network devices, cloud resources, web applications, and externally exposed assets.
• Analyze findings and prioritize remediation based on exploitability, threat intelligence, asset criticality, business impact, and risk.
• Coordinate remediation with Infrastructure, End User Services, Cloud Operations, application teams, and Security Operations, and verify closure.
• Improve scan coverage, authenticated assessment rates, asset visibility, discovery accuracy, and reporting quality.
• Develop dashboards and metrics covering vulnerability aging, SLA performance, exposure trends, remediation progress, and risk reduction.

Requirements

• Bachelor’s degree in cybersecurity, information technology, computer science, or equivalent practical experience.
• 5+ years of cybersecurity, infrastructure, or security engineering experience, including 3+ years supporting enterprise vulnerability management programs.
• Hands-on experience with Tenable or an equivalent vulnerability assessment platform.
• Experience driving vulnerability remediation across large, decentralized, or complex technology environments.
• Working knowledge of vulnerability scoring, risk-based prioritization, CVSS, CIS Benchmarks, NIST guidance, and vulnerability management practices.
• Immigration sponsorship is not available; candidates must not require current or future ZOLL sponsorship, including H1B, TN, STEM, or OPT.

Nice to have

• Cybersecurity certification such as CISSP, GIAC, CySA+, Security+, or CVA.
• Experience in healthcare, medical device, manufacturing, or other regulated environments.
• Experience with security operations, IT service management, CMDB, cloud security, scripting, APIs, or Infrastructure-as-Code.
• Experience developing dashboards, operational metrics, executive reporting, or audit evidence.

Culture & Benefits

• Work in an innovation-focused environment committed to improving patient outcomes and saving lives.
• Collaborate across Security, Infrastructure, Cloud Operations, End User Services, application teams, and other remediation partners.
• Participate in broader initiatives covering endpoint security, identity security, cloud security, Zero Trust, security hardening, threat hunting, and exposure reduction.
• Comprehensive employee benefits are available.