Senior Vulnerability Management Engineer Job Plano area,Texas USA,IT/Tech

Job Details

Job Title:

Senior Vulnerability Management Engineer
Client:
Japanese Global Automotive Group / Cybersecurity Division
Working

Location:

Plano, TX
Employment Type:

Contract
Visa Support:
No
Working Hours:

Standard Business Hours (CST)
Language:
English Fluent

Key Responsibilities

Own vulnerability findings from identification and technical triage through remediation, validation, and closure.
Analyze vulnerability data using CVE, CVSS, CISA KEV, EPSS, threat intelligence, exploitability, exposure, and business impact.
Investigate findings to determine applicability, severity, root cause, ownership, and organizational risk.
Identify false positives, duplicate findings, accepted risks, compensating controls, and exception cases.
Partner with infrastructure, application, cloud, security, and business teams to drive remediation efforts.
Track vulnerabilities against remediation timelines and SLAs, escalating overdue or critical issues when necessary.
Provide technical guidance, remediation recommendations, and mitigation strategies to stakeholders.
Validate remediation through rescans, manual reviews, testing, and supporting evidence.
Operate and optimize enterprise vulnerability management platforms such as Qualys VMDR, Tenable, Rapid7, or similar tools.
Maintain asset inventories, tagging, scan coverage, dashboards, reporting, and data accuracy within vulnerability platforms.
Develop risk-based metrics and reporting on vulnerability trends, remediation effectiveness, aging, and recurring weaknesses.
Collaborate with Asset Management, Security Operations, Threat Intelligence, Governance, Cloud, and Infrastructure teams.
Maintain vulnerability management procedures, playbooks, and supporting documentation.
Identify opportunities for automation and continuous improvement of vulnerability management processes.
Provide technical mentorship and guidance to junior security team members.

The Right Candidate Will Possess

Hands-on experience managing the complete vulnerability lifecycle in enterprise environments.
Strong analytical skills with the ability to prioritize risk beyond CVSS scores.
Deep understanding of vulnerability assessment, remediation strategies, and security best practices.
Ability to communicate technical findings clearly to both technical and non-technical stakeholders.
Experience working across infrastructure, cloud, application, and security teams.
Strong ownership mindset and ability to independently drive remediation efforts.
Experience operating vulnerability management platforms and managing large volumes of findings.
Passion for cybersecurity, threat intelligence, risk management, and continuous improvement.

Required Qualifications & Skills

4-8 years of hands‑on experience in Vulnerability Management, Security Engineering, Infrastructure Security, or related cybersecurity disciplines.
Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Business, or a related field (or equivalent experience).
Demonstrated experience owning vulnerabilities through identification, triage, prioritization, remediation, validation, and closure.
Strong hands‑on experience with Qualys VMDR, Tenable, Rapid7, or equivalent enterprise vulnerability management platforms.
Strong knowledge of CVE, CVSS, CPE, vulnerability prioritization, exploitability analysis, compensating controls, and risk acceptance processes.
Ability to independently assess scanner findings and determine appropriate remediation actions.
Experience managing high-volume vulnerability programs in complex enterprise environments.
Experience coordinating remediation efforts across multiple technical and business teams.
Experience validating remediation through rescanning, evidence assessment, testing, or manual review.
Strong working…