Vulnerability Management Engineer

• Manage and support enterprise vulnerability management activities across Windows Server and Windows workstation environments.
• Perform regular vulnerability assessments using approved scanning tools (e.g., Qualys, Tenable, Rapid7, Microsoft Defender Vulnerability Management).
• Analyze vulnerability scan results, validate findings, and prioritize remediation activities based on risk, severity, and business impact.
• Coordinate with infrastructure, server, desktop, application, and security teams to ensure timely remediation of identified vulnerabilities.
• Track, monitor, and report vulnerability remediation progress against organizational SLAs and compliance requirements.
• Lead monthly vulnerability review meetings and provide recommendations for risk reduction.
• Investigate and resolve false positives, exception requests, and vulnerability-related operational issues.
• Support security audits, regulatory compliance assessments, and internal governance requirements.
• Develop remediation plans for critical and high-risk vulnerabilities affecting Windows operating systems and Microsoft technologies.
• Work closely with SCCM/MECM, Intune, and Windows Operations teams to ensure effective patch deployment and compliance management.
• Monitor emerging security threats, vulnerabilities, and vendor advisories affecting Microsoft platforms.
• Perform root cause analysis for recurring vulnerabilities and recommend preventive controls.
• Create and maintain vulnerability management procedures, remediation runbooks, and technical documentation.
• Generate executive dashboards, compliance reports, remediation metrics, and risk-based reporting for leadership teams.
• Support vulnerability remediation projects, security initiatives, and continuous improvement activities.
• Participate in incident response activities related to security vulnerabilities, malware outbreaks, and zero-day threats.

Education

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field.

 

Experience

• 4–10 years of experience in Vulnerability Management, Windows Infrastructure, Cybersecurity Operations, or Endpoint Security.
• Hands-on experience managing vulnerabilities in enterprise Windows Server and Windows desktop environments.
• Experience working with vulnerability scanning and assessment tools such as Qualys, Tenable, Rapid7, or Microsoft Defender Vulnerability Management.
• Experience coordinating remediation activities across multiple technology teams.
• Strong understanding of patch management, security compliance, and risk management processes.

 

Technical Skills

• Strong knowledge of Windows Server and Windows 10/11 operating systems.
• Experience with vulnerability assessment, risk prioritization, and remediation tracking.
• Familiarity with Microsoft Defender for Endpoint and Defender Vulnerability Management.
• Experience with SCCM/MECM, Microsoft Intune, and Windows patch management processes.
• Knowledge of Active Directory, Group Policy, Entra ID (Azure AD), DNS, DHCP, and Windows security configurations.
• Understanding of CVSS scoring, Common Vulnerabilities and Exposures (CVE), and security risk assessment methodologies.
• Experience reviewing security advisories from Microsoft and other vendors.
• Familiarity with security hardening standards and frameworks such as CIS Benchmarks, NIST, and ISO 27001.
• Basic scripting knowledge using PowerShell for automation, reporting, and remediation activities.
• Understanding of endpoint security, malware protection, and vulnerability lifecycle management.

 

Preferred Qualifications

• Microsoft Security, Compliance, and Identity certifications.
• CompTIA Security+, CySA+, or equivalent cybersecurity certification.
• Certified Information Systems Security Professional (CISSP) or Certified Ethical Hacker (CEH) (preferred but not mandatory).
• ITIL Foundation certification.
• Experience with cloud security and Azure-based environments.

 

Key Competencies

• Strong analytical and problem-solving skills.
• Risk-based decision-making and prioritization capabilities.
• Effective stakeholder management and cross-functional collaboration.
• Strong reporting and presentation skills.
• Attention to detail and commitment to security best practices.
• Ability to manage multiple remediation activities in a fast-paced enterprise environment.
• Proactive mindset with a focus on continuous improvement and security posture enhancement.