Engineer III, Vulnerability Management

Jobleads-US

Kentucky

**Job Details****Job Summary**The Engineer III - Vulnerability Management is a senior technical contributor responsible for identifying, analyzing, prioritizing, reporting, and driving remediation of vulnerabilities and posture findings across enterprise environments. This role supports and helps mature a unified, risk-based Vulnerability and Posture Management capability spanning infrastructure, endpoints, cloud workloads, network devices, applications, SaaS platforms, external attack surface, and other critical assets. The Engineer III will help lead Continuous Threat Exposure Management (CTEM) activities, operate and optimize attack surface management and vulnerability management tools, and partner with technology, security, and business stakeholders to measurably reduce cyber risk.**Primary Responsibilities*** Perform advanced vulnerability analysis across infrastructure, cloud, endpoint, network, application, SaaS, and externally facing assets.* Lead and support Continuous Threat Exposure Management (CTEM) processes, including scoping, discovery, prioritization, validation, mobilization, and ongoing risk reduction activities.* Operate and improve vulnerability management, attack surface management, external posture management, cloud posture and SaaS posture capabilities.* Analyze vulnerability and posture data from multiple sources, normalize findings, and develop actionable risk-based remediation priorities.* Assess vulnerabilities using business context, asset criticality, exploitability, threat intelligence, exposure, compensating controls, and regulatory or compliance impact.* Drive remediation and risk treatment efforts with infrastructure, cloud, network, application, endpoint, DevOps, and business technology teams.* Lead emerging vulnerability and critical exposure response activities, including impact analysis, stakeholder coordination, mitigation tracking, and executive-level status reporting.* Create and maintain dashboards, metrics, and reporting for vulnerability trends, remediation progress, SLA performance, exposure reduction, attack surface changes, and program maturity.* Support implementation and optimization of unified vulnerability management workflows, including ticketing, ownership assignment, exception handling, rescan validation, remediation automation, and governance routines.* Evaluate and recommend improvements to scanning coverage, asset inventory quality, vulnerability data integrity, risk scoring, and stakeholder reporting.* Translate complex technical findings into clear remediation guidance for technical teams and concise risk summaries for leadership.* Contribute to security standards, procedures, playbooks, process documentation, and continuous improvement initiatives for the Vulnerability and Posture Management program.* Mentor junior engineers and analysts by providing technical guidance, quality review, and support for vulnerability triage and remediation governance.**Required Qualifications*** Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Information Technology, Engineering, or a related field, or equivalent practical experience.* 7-10 years of combined experience in information technology, cybersecurity, systems administration, cloud operations, network security, application security, security engineering, or related disciplines.* At least 4 years of hands-on experience in vulnerability management, exposure management, attack surface management, configuration assurance, or a closely related cybersecurity function.* At least one active cybersecurity certification, such as CISSP, CISM, Security+, CySA+, GSEC, CCSK, CCSP, OSCP, GIAC certification, or another recognized security certification.* Strong understanding of vulnerability lifecycle management, including discovery, validation, prioritization, remediation, exception handling, rescan validation, and reporting.* Experience using vulnerability assessment or vulnerability management platforms such as Qualys, Tenable, Rapid7 InsightVM, Microsoft Defender Vulnerability Management, Wiz, Armis, or comparable tools.* Experience with attack surface, posture, or exposure management capabilities such as CAASM, EASM, RBVM, CSPM, SSPM, external posture management, or security ratings platforms.* Ability to interpret vulnerability findings, CVEs, CVSS, EPSS, threat intelligence, exploitability indicators, asset context, and compensating controls to prioritize risk.* Experience working with enterprise asset data, CMDB data, ownership models, assignment groups, and business criticality attributes.* Strong analytical skills with experience using Excel, Power BI, SQL, data lakes, reporting platforms, or other data analysis and visualization tools.* Working knowledge of common security frameworks and standards such as NIST CSF, NIST 800-53, ISO 27001, CIS Critical Security Controls, PCI DSS, HIPAA, GDPR, OWASP Top 10, SANS Top 25, and MITRE ATT&CK.* Excellent written and verbal communication skills, with the ability to explain technical risk to both technical and non-technical audiences.* Demonstrated ability to coordinate cross-functional remediation activities in a complex enterprise environment.**Preferred Qualifications*** Experience helping build or mature a CTEM, exposure management, or unified risk-based vulnerability management program.* Experience with vulnerability workflow automation, ServiceNow SecOps, Jira, SOAR, or similar remediation workflow platforms.* Experience consolidating and normalizing vulnerability data across multiple source tools and integrating results into dashboards, remediation queues, or governance workflows.* Experience with cloud security and cloud posture management across AWS, Azure, Google Cloud, or hybrid environments.* Experience with external attack surface management, SaaS security posture management, configuration assurance, or third-party exposure management.* Experience supporting regulatory, audit, customer assurance, or compliance reporting related to vulnerability and exposure management.* Familiarity with scripting or automation using Python, PowerShell, APIs, or query languages to improve reporting, remediation tracking, and data quality.* Ability to influence without direct authority and lead cross-functional initiatives across technical teams, business stakeholders, and security leadership.**Tools and Technologies**The successful candidate should be comfortable working with a broad ecosystem of vulnerability, posture, exposure, and reporting technologies. Relevant tools may include vulnerability scanners, endpoint vulnerability platforms, cloud security posture tools, external attack surface management tools, SaaS posture tools, risk-based vulnerability management platforms, workflow automation solutions, SIEM or threat intelligence platforms, ServiceNow, Power BI, Excel, SQL, and data integration technologies.**Key Competencies*** Risk-based decision making and prioritization* Strong technical analysis and investigative discipline* Enterprise stakeholder management and cross-functional coordination* Clear communication of technical risk and business impact* Operational excellence, process improvement, and automation mindset* Data quality awareness and ability to reconcile conflicting tool outputs* Ownership, accountability, and ability to lead initiatives with limited direction* Ability to balance tactical remediation urgency with strategic program maturity**Success Measures*** Improved visibility and coverage across enterprise assets, including cloud, endpoint, network, application, SaaS, and externally exposed environments.* Reduced critical and high-risk vulnerability exposure through effective prioritization, remediation governance, and stakeholder engagement.* Improved mean time to remediate, vulnerability closure rate, and SLA adherence.* Increased adoption of risk-based vulnerability management and CTEM practices across security and technology teams.* Improved quality, consistency, and usability of vulnerability reporting, dashboards, ownership mapping, and remediation workflows.* Demonstrated progress in reducing attack surface risk and improving overall security posture.
J-18808-Ljbffr Jobleads-US

Apply

Vacancy posted 18 hours ago

Similar jobs that could be interesting for youBased on the Engineer III, Vulnerability Management in Kentucky vacancy

Senior Vulnerability & Attack Surface Engineer
...MWI Animal Health is seeking an Engineer III - Vulnerability Management to lead advanced vulnerability analysis across enterprise environments including infrastructure, cloud, endpoints, and applications. You will help mature CTEM, optimize attack surface and external...
Suggested
Jobleads-US
Kentucky
18 hours ago
Cybersecurity Engineer - Vulnerability Management
$225k - $300k
...Cybersecurity Engineer - Vulnerability Management We're looking for a Cybersecurity Engineer to help us mature our vulnerability management program. You'll join our Cybersecurity team, a skilled group of programmers and security experts dedicated to keeping the firm...
Suggested
Jane Street Group
Eastern, KY
4 days ago
Systems Engineering Management Planning
...Systems Engineer III page is loaded## Systems Engineer IIIremote type: In officelocations: Dayton, OHtime type: Full timeposted on: Posted... ...system and decision analysis, technical planning, and risk management efforts.* Take on significant project responsibilities and...
Suggested
For contractors
Immediate start
Sierra Nevada Corporation
Eastern, KY
3 days ago
Quality Engineering Manage
$105k - $152k
...Quality Engineer IIINakupuna Companies is seeking a Quality Engineer III to provide software testing, data collection and analysis, subject matter expertise, and... ...quality testing on the PeopleSoft Human Capital Management (HCM) deliverables to ensure required capability...
Suggested
Contract work
Work at office
2 days per week
Nakupuna Companies
Fort Knox, KY
2 days ago
Information System Security Engineer III
...dedicated Information System Security Engineer III to join our team. The Information System... ...to Government stakeholders, program managers, system architects, engineers, cybersecurity... ...requirements, cybersecurity threats, vulnerabilities, and applicable DoD security...
Suggested
Contract work
For contractors
Interim role
Local area
Star3
Eastern, KY
1 day ago
Environmental, Health and Safety Specialist III
...Job Description Environmental, Health and Safety Specialist III This is a fully onsite role based at our Covington, KY... ...programs and supports multiple sites across the organization. Assists management team with monitoring environmental compliance and safety...
Full time
Work at office
Local area
Relocation
Relocation package
Covington, KY
10 days ago
Engineer III
...Description Engineer III - Description of Role Summary Engineer III is a senior technical leader and project engineer who oversees... ...junior engineers, and ensures technical excellence. This role manages the design, analysis, and implementation of MEP-T systems for...
Work at office
Paylocity
Eastern, KY
3 days ago
Manufacturing Engineering, Assembly
...POSITION OVERVIEW POSITION OVERVIEW: The Manufacturing Engineer III will be part of the manufacturing engineering department to support... ...and adjust labor estimates to reflect actual costs. Manage multiple CAPEX projects, including ROQ, Scope of Work creation...
Work at office
Turbine Air Systems
Eastern, KY
3 days ago
Senior Operating Engineer
$7.25 per hour
...brighter way forward. Senior Operating Engineer Position Overview The Operating... ...affecting facility operations Vendor & Budget Management Coordinate with external contractors... ...Universal Certification (Type I, II, and III) or equivalent trade certification...
Hourly pay
Daily paid
Full time
For contractors
Work at office
Local area
Shift work
JLL
Florence, KY
4 days ago
Senior Cybersecurity Engineer
$130k - $185k
...years, Modine has solved the toughest thermal management challenges for mission-critical applications. Our purpose of Engineering a Cleaner, Healthier World™ means we are... ...Cloud identity and directory security Vulnerability management Security service edge (SSE) /...
Temporary work
H1b
Worldwide
Modine Manufacturing Company
Eastern, KY
6 hours ago
Engineer III
$65k - $75k
...Job Description Title : Engineer III Location : Taylor Mill, KY Overview : Sterling has helped build careers for thousands of... ...information. Meet Your Recruiter Amy Badal National Account Manager Amy is a National Account Manager at Sterling Engineering...
Work experience placement
Work at office
Local area
Sterling Engineering
Latonia, KY
1 day ago
Site Reliability Engineer
...Reports to: Manager,Cloud Operations Location: Remote - United States Position... ...Summary The Cloud Operations Engineer III is a senior member of thecloud operationsteam... ...rotation, least-privilege access, and vulnerability remediation. ~ Excellent problem-...
Temporary work
Casual work
Local area
Remote work
Worldwide
Flexible hours
OnBoard Group
Eastern, KY
1 day ago
Mechanical Engineer III
...Back Mechanical Engineer III Engineering Pheonix , Arizona Full-Time Sep 28, 2026 About the Role: Join a dynamic engineering team... ...general administrative direction from the Mechanical Division Manager. Supporting multiple projects. Leading small and mid-size...
Full time
Temporary work
Work at office
Flexible hours
2 days per week
Tai Corp
Eastern, KY
5 hours ago
Hardware / mechanical engineering
$119k - $150k
...application due to a disability, contact this employer to ask for an accommodation or an alternative application process. MECHANICAL ENGINEER III Hollywood, MD, US 30+ days ago Requisition ID: 1290 Salary Range: $119,000.00 To $150,000.00 Annually JOB...
Work experience placement
Platform Aerospace
Eastern, KY
3 days ago
Manufacturing Engineering, Assembly
...world's top brands, offering comprehensive engineering, supply chain, and manufacturing... ...Wednesday 6pm-6amAs a Manufacturing Engineer III at Jabil Inc., you will be responsible for... ...junior engineers and production personnel.Manage capital equipment projects from conception...
Work at office
Local area
Worldwide
Jabil Circuit
Florence, KY
3 days ago
Engineering-Mechanical
...As a Mechanical Engineer III at Cooper Machinery, you will play a key role within the Engineering team, working cross-functionally to ensure customer requirements are successfully met. In this role, you will make informed decisions within established parameters, tackle...
Temporary work
Local area
Cooper Machinery Services
Eastern, KY
2 days ago
Systems Engineering Tech I
...cybersecurity, systems administration, network engineering, or a related technical field. ~... ...Experience deploying and configuring vulnerability-scanning platforms such as OpenVAS,... ...with automation and configuration‑management tools such as Ansible, Puppet, and Chef...
Work at office
National Information Solutions Cooperative
Eastern, KY
3 days ago
Civil/Structural Engineering
## Structural Engineer IIIApply: Hybrid or in office: Plano, TX: Dayton, OH: Full time: Posted... ...amazing team! As a Structural Engineer III, you will lead the design, analysis, and... ...expertise in structural engineering, project management, and the ability to lead cross-functional...
Full time
Work at office
Sierra Nevada Corporation
Eastern, KY
3 days ago
Manufacturing Engineering /Electronics
...Manufacturing Engineer III Basic Position Duties # Develop mass-production engineering parameters (production, quality) for new... ...Kaizen activities; participate in monthly QCD/CRAM # Work with management, manufacturing, corporate officials and other staff regarding...
Work at office
Worldwide
Sumitomo Electric Wiring Systems
Scottsville, KY
4 days ago
Commissioning Engineer III
...Description Job Description POSITION SPECIFICATION Position: Commissioning Engineer III Department: Performance Group (PG) Reporting Relationship: Performance Group Manager COMPANY BACKGROUND KFI Engineers is a recognized industry leader in...
Full time
Contract work
Temporary work
For contractors
Flexible hours
KFI Engineers PC
Lexington, KY
26 days ago
Information Systems Security Engineer
$10k
...seeking an Information Systems Security Engineer (ISSE) to support the design,... ..., ensuring information assurance, risk management, security compliance, and secure system... ...technical security assessments to identify vulnerabilities, compliance gaps, and security risks....
Contract work
Temporary work
For contractors
Local area
Columbia Technology Partners
Eastern, KY
3 days ago
Manufacturing Engineering, Assembly
$115k - $140k
...breakthroughs in stellarator physics and engineering to create a faster and simpler approach to... ...a seasoned Manufacturing Engineer III to join our rapidly growing team. In this... ...prototype to production. Architect and manage manufacturing BOMs, routings, and inventory...
Lever
Eastern, KY
2 days ago
Process Engineering Tech I
...on quality with a passion for success – join us today! UCT is looking for a talented Process Engineer III to join us in Fremont, CA! The Process Engineer III leads and manages site-level engineering activities, including process development, equipment design, and continuous...
Work experience placement
Work at office
Local area
UCT Inc
Eastern, KY
3 days ago
Manufacturing Engineering
$109.37k - $150.38k
...About the Role Sr Manufacturing Engineer / Manufacturing Engineer III responsible for leading strategic initiatives to improve production efficiency... ...team leadership. Responsibilities Lead and manage process optimization and efficiency improvement projects...
Work experience placement
Pace Industries
Louisville, KY
2 days ago
Electrical Engineering Design
...Job Description Job Description Description: JOB TITLE: Electrical Design Engineer III REPORTS TO: Design Engineering Manager JOB STATUS: Full Time FLSA STATUS: Exempt DATE: May 4, 2025 JOB SUMMARY: Design Engineers contribute to the successful...
Full time
Contract work
Work at office
Local area
Sortation Labs LLC
Louisville, KY
a month ago
Civil Engineer III
Join to apply for the Civil Engineer III role at Verdantas 1 day ago Be among the first 25 applicants Join to apply for the Civil Engineer... ...potential budget, scope, or schedule demands to the Project Manager. Develop and implement strategies to identify and obtain repeat...
Full time
Temporary work
Work at office
Flexible hours
Verdantas
Fort Mitchell, KY
5 days ago
Mechanical Engineer III
...proprietary transportation platform combines advanced mechanical engineering with intelligent software controls to create a next-generation... ...to market. About the Role We're seeking a Mechanical Engineer III to play a critical role in commercializing Beltways' breakthrough...
Relocation package
Beltways
Hebron Estates, KY
3 days ago
System & Network Engineering
...Digital Modernization Sector/Global Solutions Management-Operations II (GSMO-II) contract Leidos is seeking an experienced Network Sytems Engineer to provide network operations and... ...management NetOps concepts. IAT Level III Certification (i.e. CISSP or equivalent)....
Contract work
United One Communications, LLC
Eastern, KY
3 days ago
Controls Engineer - III
...Job Description Job Description Description: JOB TITLE: Controls Engineer III REPORTS TO: Engineering Manager JOB STATUS: Full Time FLSA STATUS: Exempt JOB SUMMARY: The Controls Engineer III is responsible for leading all phases of a controls...
Full time
Contract work
Work experience placement
Work at office
Local area
Sortation Labs LLC
Louisville, KY
21 days ago
Senior Level Aerospace or Mechanical Engineer
...a Senior Level Aerospace or Mechanical Engineer . The job location is at Fort Campbell,... ...engineering support to the Systems Integration Management Offices (SIMO's) primary areas of... ...process. • Ability to pass the FAA Class III Flight Physical. Qualified applicants...
Interim role
Work at office
Cruz Associates Inc
Kentucky
a month ago

Do you want to receive more vacancies?

Subscribe and receive similar vacancies to Engineer III, Vulnerability Management. Be the first to apply!