Security Engineer

Job Description

Conviso Inc is hiring Security Engineer . This is remote role and it comes with benefits, 401K & some accrued PTO. The Ideal Candite will have good understanding/foundation in vulnerability management, compliance support, and cloud infrastructure security.

\n

\n

Title: Security Engineer

\n

Location: Remote, Washington, DC

\n

Experience Level: 1-3 Years

\n

\n

Key Responsibilities

\n

Vulnerability Management

\n

• Monitor, track, and support remediation activities for vulnerabilities identified through tools such as Nessus, Defender for Cloud, Invicti, and SonarQube.

\n

• Deliver weekly Splunk auditable events reports.

\n

• Lead weekly security meetings, providing updates on ongoing vulnerability and remediation efforts.

\n

• Ensure all vulnerability related certificates remain valid and current.

\n

• Track and verify that all software licenses are up to date.

\n

\n

Patch & System Assurance

\n

• After scheduled patching cycles, validate that all Virtual Machines (VMs) are operational.

\n

• Communicate status updates to application teams and key stakeholders and coordinate testing to ensure systems function as expected.

\n

\n

Auditing & Compliance

\n

• Support Plan of Action and Milestones (POA&M) tracking and drive closure of outstanding items.

\n

• Maintain and update Security Engineering checklists to ensure continuous compliance.

\n

• Fulfill A&A (Assessment & Authorization) data requests as needed.

\n

• Respond to FNA Security inquiries regarding vulnerabilities during Change Request review cycles.

\n

\n

Baseline & Configuration Management

\n

• Generate and deliver monthly baseline reports for environments, including:

\n

– Software inventories

\n

– Software end of life assessments

\n

– Ports and protocols validation

\n

– Azure infrastructure baselines

\n

– Azure VM configuration reviews

\n

\n

Agile/Scrum Participation

\n

• Maintain accuracy of JIRA boards by aligning stories and sub tasks with active sprint work.

\n

• Prepare materials and updates for sprint reviews on the first day of each sprint.

\n

\n

Qualifications

\n

• 1-3 years of experience in security engineering or related IT security roles.

\n

• Hands on experience with vulnerability scanning tools (e.g., Nessus, Invicti, SonarQube).

\n

• Familiarity with cloud security frameworks (Azure preferred).

\n

• Working knowledge of patch management processes, compliance frameworks, and auditing practices.

\n

• Exposure to SIEM tools (Splunk preferred).

\n

• Experience working in Agile/Scrum environments and using tools such as JIRA.

\n

• Strong communication skills and ability to collaborate effectively in remote teams.