Security Engineer

Conviso Inc is hiring Security Engineer . This is remote role and it comes with benefits, 401K & some accrued PTO. The Ideal Candite will have good understanding/foundation in vulnerability management, compliance support, and cloud infrastructure security. Title: Security Engineer Location: Remote, Washington, DC Experience Level: 1-3 Years Key Responsibilities Vulnerability Management • Monitor, track, and support remediation activities for vulnerabilities identified through tools such as Nessus, Defender for Cloud, Invicti, and SonarQube. • Deliver weekly Splunk auditable events reports. • Lead weekly security meetings, providing updates on ongoing vulnerability and remediation efforts. • Ensure all vulnerability related certificates remain valid and current. • Track and verify that all software licenses are up to date. Patch & System Assurance • After scheduled patching cycles, validate that all Virtual Machines (VMs) are operational. • Communicate status updates to application teams and key stakeholders and coordinate testing to ensure systems function as expected. Auditing & Compliance • Support Plan of Action and Milestones (POA&M) tracking and drive closure of outstanding items. • Maintain and update Security Engineering checklists to ensure continuous compliance. • Fulfill A&A (Assessment & Authorization) data requests as needed. • Respond to FNA Security inquiries regarding vulnerabilities during Change Request review cycles. Baseline & Configuration Management • Generate and deliver monthly baseline reports for environments, including: – Software inventories – Software end of life assessments – Ports and protocols validation – Azure infrastructure baselines – Azure VM configuration reviews Agile/Scrum Participation • Maintain accuracy of JIRA boards by aligning stories and sub tasks with active sprint work. • Prepare materials and updates for sprint reviews on the first day of each sprint. Qualifications • 1-3 years of experience in security engineering or related IT security roles. • Hands on experience with vulnerability scanning tools (e.g., Nessus, Invicti, SonarQube). • Familiarity with cloud security frameworks (Azure preferred). • Working knowledge of patch management processes, compliance frameworks, and auditing practices. • Exposure to SIEM tools (Splunk preferred). • Experience working in Agile/Scrum environments and using tools such as JIRA. • Strong communication skills and ability to collaborate effectively in remote teams. Conviso