CTEM Engineer

About Courser

Courser accelerates the growth of IT service provider companies. We forge dynamic partnerships, leveraging our values of Teamwork, Service, Growth-Mindedness, Trust, and Innovation to deliver impactful solutions and phenomenal customer experiences. If you thrive in a fast-paced IT environment, join our rapidly expanding team and contribute to our ongoing success.

The CTEM Engineer leads the continuous identification, validation, prioritization, and remediation of security exposures across managed environments. This role owns the CTEM platform and vulnerability management lifecycle, ensuring threats are accurately assessed and remediated according to risk, business impact, and contractual service commitments.

The CTEM Engineer collaborates with MSP partners, security operations, and technical teams to coordinate remediation activities, monitor program performance, and reduce organizational cyber risk. Key responsibilities include exposure monitoring, vulnerability validation, remediation oversight, stakeholder communication, and maintaining accountability for timely and effective resolution of identified risks. This position plays a critical role in strengthening security posture, improving operational resilience, and driving measurable risk reduction outcomes.

• Continuously monitor and assess vulnerabilities, exposures, and security risks across managed environments using the CTEM platform and associated security monitoring tools.
• Validate vulnerability detections and threat exposures to eliminate false positives and ensure remediation efforts focus on verified risk.
• Respond to critical and high-risk vulnerability findings by coordinating timely investigation, escalation, and remediation activities.
• Prioritize remediation efforts based on risk, exploitability, business impact, and service-level commitments.
• Partner with MSP engineers, internal technical teams, and security stakeholders to drive vulnerabilities through the remediation lifecycle to closure.
• Track remediation progress and ensure vulnerabilities are resolved within established SLAs and customer commitments.
• Conduct operational analysis of CTEM processes, workflows, and remediation outcomes to identify bottlenecks and opportunities for continuous improvement.
• Perform routine platform administration, including configuration management, policy updates, integrations, and system maintenance.
• Maintain detailed documentation of vulnerability investigations, remediation activities, exceptions, and customer communications.
• Develop and maintain reporting dashboards and metrics that provide visibility into exposure trends, remediation performance, SLA compliance, and overall risk posture.
• Support security architecture and technology improvement initiatives by identifying recurring exposure patterns and recommending long-term corrective actions.
• Document lessons learned from vulnerability and remediation activities and implement preventative measures to reduce future risk.
• Develop and maintain automation, scripting, and workflow enhancements that improve operational efficiency and accelerate remediation efforts.
• Continuously improve CTEM monitoring, detection, prioritization, and reporting capabilities to enhance proactive risk management.
• Build and maintain effective working relationships with MSP partners and internal stakeholders to ensure consistent and timely remediation outcomes.
• Provide regular status updates and executive-ready reporting on vulnerability management performance, exposure reduction efforts, and program effectiveness.

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field preferred.
• 1-3 years of experience in vulnerability management, security operations, exposure management, or a related cybersecurity discipline.
• Strong understanding of vulnerability management methodologies, risk assessment frameworks, and remediation best practices.
• Experience working with vulnerability management and security monitoring platforms such as Rootshell, Qualys, Nessus, Microsoft Defender, Sentinel One, and Huntress.
• Knowledge of vulnerability scoring and prioritization models, including CVSS, KEV, and risk-based remediation approaches.
• Solid understanding of network and security fundamentals, including TCP/IP, DNS, VPNs, firewalls, authentication protocols, and endpoint security controls.
• Familiarity with operating system administration and…