Vulnerability Management Administrator

Position: Vulnerability Management Administrator Location: Remote (Anywhere in the U.S.) Work Hours: 8:00 AM – 5:00 PM PST (Monday–Friday) 1. Role Summary The Vulnerability Management Administrator (Security Engineer) is responsible for securing complex technology environments by identifying, analyzing, and mitigating security vulnerabilities. The role includes conducting security assessments, designing mitigation strategies, and collaborating with cross-functional teams to improve the organization's overall security posture. The engineer will bridge legacy systems with modern security tools and practices. 1. Key Responsibilities A. Vulnerability & Risk Management Perform security audits, risk assessments, and vulnerability scans. Conduct application-level vulnerability testing and security code reviews. Assess risks using CVSS v3 scoring and prioritize remediation efforts. Configure, customize, and optimize vulnerability scanning templates and policies. Evaluate asset exposure, business impact, and criticality to guide remediation. B. Technical Security Operations Develop and implement solutions to mitigate identified vulnerabilities. Conduct threat modeling and analyze potential attack vectors. Perform security scanning of Operational Technology (OT) devices including PLCs, IoTs, HVAC, DCS, and utility systems. Manage asset tagging, grouping, and maintenance within security tools. C. Automation & Integration Automate security workflows and processes using APIs. Use Python scripting for automation, data handling, and process enhancements. D. Reporting & Collaboration Prepare detailed reports on vulnerabilities, remediation progress, and security trends. Collaborate with development, DevOps, infrastructure, and operations teams. Improve scan performance and enhance overall vulnerability management operations. 1. Required Experience Minimum 10 years developing and implementing technical solutions to mitigate security vulnerabilities. Strong knowledge of cybersecurity frameworks, ethical hacking, and data protection. Solid understanding of endpoint security, asset tracking, and threat modeling. 1. Preferred Experience 5+ years experience with Tenable.io / Tenable.sc (TenableOne) for cloud and network vulnerability management: Vulnerability analysis and prioritization CVSS v3 scoring Asset tagging, grouping, and reporting Performance optimization OT device scanning 5+ years experience with automation, API integration, and Python scripting. 3+ years experience with Tanium for patching and deployments. 3+ years experience with Axonius cybersecurity asset management. Knowledge of endpoint and extended detection platforms (e.g., CrowdStrike XDR). 1. Education Requirements Bachelor’s degree in IT, Engineering, or a related field. Equivalent experience may substitute for education on a year-for-year basis. Job Types: Full-time, Contract Pay: $40.00 - $50.00 per hour Expected hours: 48 per week Work Location: Remote