What are the responsibilities and job description for the Vulnerability Management Engineer position at Avacend Inc?
Onsite in Charlotte - Hybrid model - onsite 3 days a week. **Vulnerability Management Engineer ** Vulnerability Management: addressing vulnerabilities identified in our on prem and cloud infrastructure to ensure compliance with audit mandates; **Container Security: Ensuring security hygiene for containerized applications, including vulnerability scanning and remediation for container images and lifecycle management; **Build and deploy automation scripts using Python and JavaScript to streamline processes and enhance; **Cybersecurity operations – perform vulnerability scanning using tools such as Qualys, Prisma Cloud, Rapid7, and remediate identified vulnerabilities; **Cloud security background; **Prefer candidates with relevant cybersecurity certifications (e.g., CISSP, AWS Certified Security). **Critical thinking/problem solving, detail oriented. **Collaborative & highly professional, able to self-manage (does not need constant direction/micromanagement) **Positive attitude, team player, works well with others and excellent time management and able to work well in a matrixed environment.
Vulnerability Management Engineer
Focus primarily on security tool engineering in the vulnerability management space, integrating these tools with downstream repositories, and providing needful guidance on remediating findings, including;
Vulnerability Management: Addressing vulnerabilities identified in our on prem and cloud infrastructure to ensure compliance with audit mandates. This includes remediating issues flagged by our vulnerability scanning tools, which require specific expertise to handle cloud-native threats.
Container Security: Ensuring security hygiene for containerized applications, including vulnerability scanning and remediation for container images and lifecycle management.
Engineering and Development for Tool Integrations: Developing necessary integrations for key cybersecurity tools as outlined by the audit findings and managing data integration with security platforms to provide comprehensive coverage and visibility across systems.
Automation and Process Improvement: Implementing automation for security processes to streamline threat detection and response, which is essential for meeting audit requirements and mitigating security risks efficiently
