Full stack engineer Vulnerability Management

Job Title: Full stack engineer with Vulnerability Management

Location :
Charlotte, NC

Full Time

• Full stack developer with experience in following areas, Java, Spring Boot, Maven, Node.js, NPM, React, CI/CD, JUNIT, Tosca, Litmus
• Strong experience in Vulnerability Management and enterprise remediation programs.
• Expertise in Cybersecurity Governance, Risk Management, and Compliance.
• Experience coordinating vulnerability remediation across:
• Middleware Platforms, Server/Platform Infrastructure, Databases, Applications, Cloud and On-Prem Environments
• Knowledge of enterprise vulnerability management tools such as Qualys, Tenable, Rapid7, Service Now Vulnerability Response.
• Experience managing remediation activities for BI and Analytics platforms:
  Tableau, Micro Strategy, Cognos, Power BI, TIBCO, Starburst

• CVSS Scoring, Security Risk Ratings, Patch Management, Vulnerability Lifecycle Management, Risk Acceptance / Exception Processes

• Experience with security governance reporting, audit support, and compliance requirements.
• Strong stakeholder management and cross-functional coordination skills.
• ITIL Processes (Incident, Change, Problem Management)
• Enterprise Infrastructure & Platform Services
• Process Improvement and Automation
  · Banking/Financial Services domain experience preferred
• Lead end-to-end execution of enterprise vulnerability remediation initiatives.
• Coordinate remediation efforts across Infrastructure, Middleware, Database, Platform, Application, and Security teams.
• Develop and maintain remediation plans, project schedules, milestones, dependencies, and deliverables.
• Drive closure of security vulnerabilities within enterprise-defined SLAs.
• Facilitate governance meetings, remediation reviews, risk discussions, and executive status updates.
• Partner with Information Security, GIS, Infrastructure Services, Database Services, Middleware Services, Application Support teams, and external vendors.

• Escalate overdue remediation activities, resource constraints, and critical risks.
• Ensure remediation activities meet audit, regulatory, and security compliance requirements.
• Maintain remediation evidence and documentation for audits and compliance reviews.
• Monitor vulnerability dashboards and ensure accuracy of governance metrics.
• Drive continuous improvement initiatives around remediation processes, governance, reporting, and automation.
• Act as the central point of contact between technology teams, security teams, leadership, and vendors.