Security Engineer

Conviso Inc is hiring Security Engineer . This is remote role and it comes with benefits, 401K & some accrued PTO. The Ideal Candite will have good understanding/foundation in vulnerability management, compliance support, and cloud infrastructure security.

Title: Security Engineer

Location: Remote, Washington, DC

Experience Level: 1-3 Years

Key Responsibilities

Vulnerability Management

- Monitor, track, and support remediation activities for vulnerabilities identified through tools such as Nessus, Defender for Cloud, Invicti, and SonarQube.

- Deliver weekly Splunk auditable events reports.

- Lead weekly security meetings, providing updates on ongoing vulnerability and remediation efforts.

- Ensure all vulnerability related certificates remain valid and current.

- Track and verify that all software licenses are up to date.

Patch & System Assurance

- After scheduled patching cycles, validate that all Virtual Machines (VMs) are operational.

- Communicate status updates to application teams and key stakeholders and coordinate testing to ensure systems function as expected.

Auditing & Compliance

- Support Plan of Action and Milestones (POA&M) tracking and drive closure of outstanding items.

- Maintain and update Security Engineering checklists to ensure continuous compliance.

- Fulfill A&A (Assessment & Authorization) data requests as needed.

- Respond to FNA Security inquiries regarding vulnerabilities during Change Request review cycles.

Baseline & Configuration Management

- Generate and deliver monthly baseline reports for environments, including:

– Software inventories

– Software end of life assessments

– Ports and protocols validation

– Azure infrastructure baselines

– Azure VM configuration reviews

Agile/Scrum Participation

- Maintain accuracy of JIRA boards by aligning stories and sub tasks with active sprint work.

- Prepare materials and updates for sprint reviews on the first day of each sprint.

Qualifications

- 1-3 years of experience in security engineering or related IT security roles.

- Hands on experience with vulnerability scanning tools (e.G., Nessus, Invicti, SonarQube).

- Familiarity with cloud security frameworks (Azure preferred).

- Working knowledge of patch management processes, compliance frameworks, and auditing practices.

- Exposure to SIEM tools (Splunk preferred).

- Experience working in Agile/Scrum environments and using tools such as JIRA.

- Strong communication skills and ability to collaborate effectively in remote teams.