Infrastructure Security Vulnerability Engineer (Cloud Security)

Location: Virtual, US; US citizenship and current authorization to work in the United States without visa sponsorship are required.

Salary: $127,100–$133,400 plus benefits; the stated range includes salary plus bonus.

Company

Enterprise software organization providing a cloud platform that connects customer and employee communication channels, insights, technologies, and workflows for large organizations and government agencies.

What you will do

• Lead and coordinate vulnerability remediation across infrastructure and applications from identification through closure.
• Evaluate CVE, CVSS, exploitability, threat intelligence, asset criticality, attack paths, and exposure data to prioritize remediation.
• Support remediation aligned with CISA BOD 26-04 and other federal cybersecurity directives, including deadline tracking.
• Assess and remediate vulnerabilities across Windows Server 2019 and later, Linux/RHEL 9.x and later, and application environments using patching, configuration changes, and other corrective actions.
• Use Tenable Security Center, Nessus, Qualys, ServiceNow, and other systems of record to validate findings, track actions, document status, and manage escalations.
• Coordinate with application owners, infrastructure teams, vendors, and risk partners; produce metrics and reports and improve vulnerability management workflows with cloud-based AI tools.

Requirements

• 3–5+ years of experience in vulnerability management, vulnerability remediation, patch management, or a closely related infrastructure security role.
• 5–6 years of experience with a bachelor’s degree or equivalent, or 4 years of experience with a master’s degree or equivalent.
• Hands-on experience with Tenable Security Center, Nessus, and Qualys.
• Working knowledge of Windows Server 2019 and later, including vulnerability remediation, security patching, and system configuration.
• Experience supporting Linux environments, particularly Red Hat Enterprise Linux (RHEL) 9.x and later, including security updates, patching, and vulnerability remediation.
• Understanding of CVE/CVSS analysis, vulnerability prioritization, exploitability, threat intelligence, asset criticality, and exposure-based remediation.
• Experience coordinating remediation and patch management, tracking findings through closure, and working with technical teams.
• Familiarity with change management processes and operational controls.
• Experience using ServiceNow or similar systems to track vulnerabilities, document progress, manage escalations, and maintain accurate records.
• Strong Microsoft Excel, reporting, written and verbal communication, analytical, organizational, troubleshooting, and prioritization skills.
• Ability to work within a regulated cloud environment and follow security, compliance, documentation, and risk management processes.
• Must be a US citizen.
• Bachelor’s degree or equivalent experience; master’s degree or equivalent experience is also accepted.

Nice to have

• Familiarity with FedRAMP, NIST SP 800-53, DISA STIGs, and federal cybersecurity compliance requirements.
• Experience using CISA Known Exploited Vulnerabilities information and other threat intelligence sources.
• Experience supporting US federal government, Department of Defense, or other regulated enterprise environments.
• Experience with PowerShell, Bash, or Python for automation.
• Familiarity with ManageEngine Endpoint Central or similar endpoint management and patch deployment platforms.
• Experience supporting VMware and Active Directory.
• Experience coordinating remediation of application and web application security vulnerabilities.
• Familiarity with cloud security technologies and AI-assisted security tools.
• Relevant cybersecurity, vulnerability management, infrastructure security, or cloud security certifications, such as Security+, CySA+, or CISSP.
• Track record of improving remediation timelines, reporting, automation, and technology risk reduction.

Culture & Benefits

• Virtual work arrangement in the United States.
• Benefits are included with the compensation package.
• Work supports critical federal government operations and regulated cloud environments.
• Cross-functional collaboration with application owners, infrastructure engineers, vendors, and risk stakeholders.
• Opportunity to improve security operations through automation, analytics, and AI-assisted capabilities.