Vulnerability Management Engineer

Basic Qualifications

Bachelor's degree in Engineering, or a related Science or Mathematics field, plus a minimum of 5 years of relevant experience; or Master's degree plus a minimum of 3 years of relevant experience.

CLEARANCE REQUIREMENTS: Department of Defense Secret security clearance obtainable within reasonable time based on requirements. Applicants selected will be subject to a U.S. Government security investigation and must meet eligibility requirements for access to classified information. Due to the nature of work performed within our facilities, U.S. citizenship is required.

Responsibilities for this Position

Position Summary

Vulnerability Management Engineer; performs technical execution and coordination of vulnerability remediation and patch management activities across Windows, Linux and Cisco operating systems, network infrastructure, and security appliances within offline, air-gapped, and restricted-access environments.

Use Tenable Nessus and Tenable Security Center+ to analyze vulnerability findings, determine remediation requirements, develop device-to-patch mappings, coordinate patch testing, troubleshoot installation failures, and validate remediation effectiveness. Research vendor advisories, and manufacturer security releases to support timely and accurate remediation.

Coordinates patch qualification through designated integration and pre-production laboratory environments before preparing approved patch packages and deployment instructions for remote production implementation teams. Tracks remediation progress, evaluates deployment outcomes, maintains technical documentation, and produces status reports and compliance evidence to support cybersecurity risk reduction and operational readiness.

Works within established procedures and delegated authority, escalating complex technical issues, significant operational risks, and exceptions requiring senior-level review.

Key Responsibilities:

• Independently execute established patch testing procedures in the initial integration laboratory and final pre-production environment. • Validate installation success, prerequisite compliance, service functionality, system stability, and compatibility with the target environment. • Perform pre-installation and post-installation checks and document test results, errors, anomalies, and remediation steps. • Troubleshoot routine and moderately complex patch installation failures and identify likely causes. • Determine whether test results satisfy established acceptance criteria and prepare evidence-based recommendations for release or further investigation. • Identify patches that require additional testing, revised installation instructions, or coordination with system owners. • Maintain, and refine standard operating procedures, patching work instructions, troubleshooting guides, and validation checklists. • Develop or modify scripts and utilities to improve repetitive patching, data collection, validation, reporting, and remediation tracking tasks, where authorized. • Identify opportunities to improve vulnerability data quality, reduce manual tracking effort, standardize deployment evidence, and increase operational efficiency. • Recommend updates to patch qualification procedures based on observed failures, recurring vulnerabilities, and laboratory or production feedback. • Provide technical guidance to junior team members on established procedures, documentation standards, and routine troubleshooting. • Share lessons learned and contribute to continuous improvement of the vulnerability remediation lifecycle.