Senior Vulnerability Management Engineer

🔥 1 minute ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Group 1001

WebsiteLinkedInAll Job Openings

501 - 1000 employees

💸 Finance

📚 Education

Finance • Insurance • Education

Group 1001 is a collective focused on empowering companies and communities through innovative financial solutions and strategic partnerships. The company provides simple and accessible insurance and annuity products designed to help individuals manage and grow their savings. Their online investing platform offers users a digital means to control their financial futures. Group 1001 also invests in partnerships that enhance community development through education and sports. With a tech-driven culture, they are transforming the insurance industry and helping communities thrive.

📋 Description

• Own the end-to-end vulnerability management pipeline: asset discovery > scanning > enrichment > prioritization > assignment > verification > closure. • Build, codify, and iterate a data-driven prioritization framework (blending CVSS, EPSS, KEV, exploit availability, asset criticality, exposure/reachability, compensating controls, and business context). • Automate the full workflow via SOAR playbooks, webhooks, REST/GraphQL APIs, message queues, and custom scripts where needed. • Develop and improve KPIs, metrics, and trending for vulnerability management functions, and bring leadership attention to root-cause issues driving systemic vulnerability risk. • Integrate scanners, CMDB/asset inventory, EDR, cloud providers (AWS/Azure/GCP), and others into a single pipeline for management. • Continuously reduce noise: dedupe, suppress known-benign, correlate related findings, and auto-close on evidence of remediation. • Evaluate and integrate AI/LLM tooling for triage, false-positive suppression, remediation guidance, and vulnerability research — with appropriate guardrails. • Lead technical response for emergency patch cycles on various technical platforms.

🎯 Requirements

• Bachelor's degree in Computer Science, Information Security, or related academic field or equivalent experience. • 5-7 years of professional experience in information security, with focus on the financial sector. • Hands-on experience deploying, configuring, and managing vulnerability scanning solutions at enterprise scale, including policy design, tuning for noise reduction, and managing performance impact (e.g. Tenable, Microsoft Defender, Wiz, Tanium). • Hands-on experience engineering, integrating, and optimizing for automation of security platforms (e.g. Swimlane, Elastic). • Strong knowledge of public cloud platforms (e.g., AWS, Azure, GCP) from an infrastructure and development aspect and their related security features. • Familiarity with DevSecOps practices and CI/CD pipelines. • Understanding of industry security frameworks, standards, and best practices (e.g., NIST, ISO, CIS). • Proficiency in one or more software programming languages (e.g. Python, Golang, JavaScript), particularly for automation of security platform operations, health monitoring, and integration tasks. • Familiarity with compliance standards and regulations. • Creativity and critical thinking with the ability to work both independently and collaboratively in a fast-paced environment. • Be able to serve as a mentor or subject matter expert to other members within the organization, particularly in the areas of vulnerability management and systems engineering.

🏖️ Benefits

• Employees (and their families) are eligible to participate in the Company’s comprehensive health, dental, and vision insurance plan options. • Employees are also eligible for Basic and Supplemental Life Insurance, Short and Long-Term Disability. • All employees (regardless of hours worked) have immediate access to the Company’s Employee Assistance Program and wellness programs—no enrollment is required. • Employees may also participate in the Company’s 401K plan, with matching contributions by the Company. • Group 1001, and its affiliated companies, is strongly committed to providing a supportive work environment where employee differences are valued.