Vulnerability Engineer

Role Summary

We are seeking a Vulnerability Management Analyst to join a growing cybersecurity team in Richardson, TX. This onsite role supports 24x7 vulnerability management operations focused on identifying, assessing, prioritizing, and reducing technology risk across enterprise environments. The position plays a critical role in ensuring newly disclosed vulnerabilities and zero-day threats are quickly analyzed and remediated to minimize organizational exposure.

The successful candidate will evaluate emerging threats, determine exploitability and business impact, and provide actionable remediation guidance across cloud, endpoint, server, and network environments. Working closely with IT and security teams, you will help accelerate vulnerability resolution, validate remediation efforts, and strengthen the organization's overall security posture.

Key Responsibilities

• Monitor vulnerability disclosures, security advisories, and zero-day threats on a continuous basis.
• Perform in-depth analysis to assess exploitability, severity, and business impact of newly identified vulnerabilities.
• Assess risk across cloud, endpoint, server, and network infrastructure environments.
• Research and validate vendor guidance, patches, mitigations, and compensating controls.
• Provide clear remediation recommendations to infrastructure and technology teams.
• Utilize ServiceNow to manage vulnerability workflows, remediation tracking, documentation, and reporting.
• Verify remediation activities and confirm successful vulnerability closure.
• Support overnight, weekend, and maintenance window activities requiring vulnerability management expertise.

Key Requirements

• 3+ years of experience in Vulnerability Management, Cybersecurity Operations, Security Engineering, or a related information security role.
• Hands-on experience with vulnerability management platforms such as Tenable, Wallace, Wiz, or similar exposure management solutions.
• Experience utilizing ServiceNow for vulnerability management, workflow coordination, ticketing, and reporting.
• Strong understanding of CVSS scoring, vulnerability prioritization, exploitability analysis, and risk-based remediation practices.
• Experience supporting cloud, endpoint, server, and network security environments.
• Knowledge of patch management processes, threat intelligence sources, vendor advisories, and compensating controls.
• Excellent communication skills with the ability to translate technical findings into actionable recommendations.
• Strong analytical, organizational, and collaboration skills with the ability to thrive in a fast-paced, 24x7 operational environment.