Vulnerability Management Engineer (Cybersecurity)

Location: Hybrid in Centennial, Colorado; candidates must live within 30 miles of an office and work onsite three days per week. United States citizenship and authorization to work in the United States without current or future sponsorship are required.

Salary: $75,000–$125,000 annually, depending on experience.

Company

hirify.global is a diversified services company operating across student lending, professional services, payments, renewable energy, and K–12 and higher education.

What you will do

• Design, develop, and continuously improve the vulnerability management strategy in alignment with business and security requirements.
• Configure and maintain vulnerability scanning solutions and monitor emerging threats and vulnerabilities.
• Analyze vulnerability data, assess risk, and prioritize remediation activities.
• Develop remediation plans and collaborate with technology teams and business stakeholders to resolve critical vulnerabilities.
• Partner with the SOC, Cyber Threat Intelligence, and Offensive Security teams to validate impacts, recommend mitigations or compensating controls, and report remediation progress.

Requirements

• United States citizenship and the ability to obtain the required United States Government security clearance.
• Existing United States work authorization without current or future visa sponsorship.
• At least 2 years of experience in vulnerability management and/or security operations.
• Experience with vulnerability management platforms such as Rapid7, Qualys, or Tenable, and patching tools such as Microsoft MECM.
• Experience administering EDR solutions, including Microsoft Windows Defender, CrowdStrike Falcon, VMware Carbon Black, Palo Alto Cortex XDR, or Tanium.
• Required knowledge of Python, security frameworks, and vulnerability threats in cloud-hosted environments.

Nice to have

• Bachelor’s degree in cybersecurity or information systems, or equivalent relevant experience.
• Experience with Azure, AWS, and GCP security threats and hosted services.
• Certifications such as GIAC GSEC, GCED, GEVA, CompTIA Security+, CySA+, or CISSP.

Culture & Benefits

• Hybrid work environment supporting remote work part of the week and regular in-office collaboration.
• Medical, dental, vision, HSA, and FSA benefits.
• Earned time off, 401(k), student loan repayment, life insurance, and disability coverage.
• Tuition reimbursement, employee stock purchase program, performance-based incentive pay, and wellness resources.