Security Engineer (Vulnerability Management)
Share
Job Location:
Atlanta, GA - USA
Monthly Salary:
Not Disclosed
Posted on:
3 hours ago
Vacancies:
1 Vacancy
Job Summary
Position Summary
The Vulnerability Management Engineer is responsible for assessing managing and reducing security vulnerabilities across enterprise server and workstation environments. This role will perform scheduled vulnerability scans evaluate risks recommend remediation plans support patch cycles and develop reporting that improves the organizations security maturity.
The ideal candidate has deep hands-on experience with enterprise patch management security baselines vulnerability scanning tools scripting and remediation across Windows and/or Linux platforms.
Key Responsibilities
Vulnerability Identification & Analysis
Perform recurring vulnerability scans for servers and workstation environments.
Analyze scan results to identify actionable risks false positives and system exposure levels.
Prioritize vulnerabilities based on industry frameworks (CVSS KEV CISA etc.).
Coordinate with application owners for patching and remediation scheduling.
Patch & Remediation Support
Partner with server and desktop teams to support monthly and quarterly patching cycles.
Provide technical guidance on workarounds hotfixes or remediate configuration issues.
Assist in validating remediation success post-deployment.
Help refine patch and configuration baselines for repeatability and security.
Reporting & Metrics
Develop weekly monthly and quarterly dashboards on:
- Remediation progress
- Aging vulnerabilities
- SLA/KPI compliance tracking
- Platform-level trends
Report critical vulnerabilities and escalating risks to leadership as needed.
Tooling & Automation
Operate and tune vulnerability scanning and endpoint management tools (e.g. Qualys Microsoft Defender Intune PatchMyPC SCCM Azure Update Manager etc.).
Recommend configuration improvements automation and scanning optimizations.
Assist in integrating scan results into ticketing or workflow tools such as ServiceNow or Jira.
Security Standards & Compliance
Ensure systems adhere to organization security policies CIS benchmarks NIST guidance and other relevant frameworks.
Help improve patching and vulnerability management SOPs runbooks and governance processes.
Support internal or external audit and compliance reporting requirements.
Qualifications :
Required Qualifications
37 years experience in vulnerability management patch management or endpoint/server security operations.
Demonstrated technical proficiency with:
- Windows Server and Windows desktop platforms
- Patch deployment and configuration management
Experience operating one or more security scanning platforms (e.g. Qualys Defender Azure Update Manager PatchMyPC etc.).
Ability to analyze scan output identify false positives and communicate meaningful remediation guidance.
Strong understanding of:
- CVEs CVSS scoring and exploitability assessments
- Common ransomware and threat vectors targeting enterprise endpoints
Preferred Experience
Experience in mixed operating system environments (Windows and Linux).
Familiarity with:
- Microsoft Intune and/or SCCM
- Azure Update Manager
- Azure Arc
- ServiceNow
- CIS or NIST standards
Ability to create automation scripts (PowerShell Bash Python or similar).
Additional Information :
Why Join Us
InstantServe offers a dynamic work environment where you can make a significant impact on the healthcare industry. We provide competitive compensation opportunities for professional growth and a supportive team culture. All your information will be kept confidential according to EEO guidelines.
Remote Work :
No
Employment Type :
Contract
Key Skills
- Splunk
- IDS
- Network security
- Computer Networking
- Identity & Access Management
- PKI
- PCI
- NIST Standards
- Security System Experience
- Information Security
- Encryption
- Siem
