Vulnerability Remediation Engineer

Piper Companies is seeking a Vulnerability Remediation Engineer for a leading technology organization in the Raleigh, North Carolina area. The Vulnerability Remediation Engineer role is a hybrid position with 2 days onsite in the office. The Vulnerability Remediation Engineer will be responsible for identifying, prioritizing, and remediating security vulnerabilities across enterprise systems and applications. An ideal candidate for the Vulnerability Remediation Engineer role is an experienced security professional with strong knowledge of vulnerability management, risk prioritization, and remediation strategies.

Responsibilities of the Vulnerability Remediation Engineer:

• Identify, analyze, and remediate vulnerabilities across infrastructure, applications, and cloud environments.
• Prioritize vulnerabilities based on risk, exploitability, and business criticality using industry frameworks (CVSS, NIST).
• Collaborate with engineering and IT teams to implement timely remediation and mitigation strategies.
• Track and report on vulnerability remediation progress, metrics, and compliance requirements.
• Perform root cause analysis and recommend improvements to reduce recurring security risks.

Qualifications of the Vulnerability Remediation Engineer:

• 4+ years of experience in vulnerability management, cybersecurity, or related field.
• Strong understanding of vulnerability scanning tools (e.g., Nessus, Qualys, Rapid7).
• Experience prioritizing vulnerabilities based on risk and operational impact.
• Familiarity with operating systems, networking, and cloud platforms (AWS, Azure, or GCP).
• Knowledge of security frameworks such as NIST, CIS, or ISO 27001.

Compensation for the Vulnerability Remediation Engineer includes:

Salary range: $120,000 – $140,000 depending on experience

• Comprehensive benefits package including medical, dental, vision, 401(k), PTO, Sick Leave as required by law
• This job opens for applications on 06/14/2026. Applications for this job will be accepted for at least 30 days from the posting date.