Security Specialist, Vulnerability Management

🔥 19 hours ago

🏄 California – Remote

🏄 California – Remote

💵 $120k - $175k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 12%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

AXON Networks

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2021

💼 Consulting

📦 Logistics

📣 Marketing

Consulting • Logistics • Marketing

AXON Networks is a technology company focused on developing innovative networking solutions. They specialize in providing advanced connectivity options and data management systems tailored for various industries, enhancing communication and operational efficiency.

📋 Description

• Establish and operate a risk-based vulnerability management capability across cloud platforms, applications, Kubernetes and container environments, network infrastructure, software supply chains and cloud-managed customer-premises equipment • Establish authoritative vulnerability visibility across cloud, application, container, Kubernetes, network, endpoint, dependency, firmware and CPE asset classes • Inventory the attack surface and define coverage for internet-facing and internal assets, cloud services, hosts, network devices, containers, Kubernetes clusters, applications, APIs, source code, dependencies, images, infrastructure as code and CPE/firmware • Design, configure and maintain authenticated and unauthenticated scans, agent-based assessments, cloud-native configuration checks, container and dependency scans, external attack-surface discovery and targeted validation tests • Establish safe scan windows, credentials, rate limits, exclusions and testing procedures to avoid destabilizing production, customer environments or CPE fleets • Evaluate, select and administer vulnerability-management and scanning tools such as Tenable Nessus, Qualys, Rapid7, Wiz, Orca, Prisma Cloud, Snyk, Veracode, Checkmarx, Trivy, Grype and Nuclei • Measure coverage, scan health, credential success, stale assets and blind spots; improve asset-to-owner mapping and data quality • Review findings and determine whether they are true positives, false positives, duplicates, accepted risks, mitigated conditions or actionable vulnerabilities • Analyze CVE applicability using affected components and versions, package provenance, CPE or firmware SBOMs, runtime reachability, configuration, network exposure, privileges, exploit prerequisites and existing controls • Reproduce or safely validate material findings using advisories, proof-of-concept analysis, logs, configuration evidence, package inspection and non-production testing • Monitor vulnerability intelligence and vendor advisories for cloud, Kubernetes, Linux, networking, broadband/CPE, open-source and commercial technologies • Prioritize remediation using CVSS, CISA KEV, EPSS, exploit availability, exposure, reachability, asset criticality, tenant/customer impact and compensating controls • Define remediation and mitigation targets by risk tier and escalate actively exploited or internet-reachable vulnerabilities • Create remediation records with affected assets, evidence, owners, due dates, recommended actions, validation criteria and customer or operational considerations • Partner with Engineering and DevOps on patches, upgrades, configuration changes, image rebuilds, dependency updates, firmware releases and compensating controls; verify closure through rescans or equivalent evidence • Manage risk exceptions with documented rationale, accountable approval, compensating controls, expiration dates and scheduled reassessment • Assess end-to-end security across cloud control planes, APIs, device-management protocols, access networks, gateways, routers, ONTs and connected-home devices • Work with Engineering to identify affected device models, hardware revisions, firmware branches, software components and deployed cohorts; support safe remediation and rollout validation • Build automation and integrations for asset enrichment, deduplication, risk scoring, ticket creation, ownership routing, SLA tracking, notifications, rescans, exception expiry and evidence collection • Maintain dashboards for coverage, exploitable exposure, aging, remediation performance, repeat findings, exceptions, asset ownership and risk trends • Develop playbooks, standards and procedures for routine vulnerability handling, critical CVEs, zero-day response, scanner administration and tool outages • Report to technical owners and leaders, separating raw finding volume from material risk and identifying decisions or overdue actions • Support audits and customer security inquiries with traceable evidence while protecting sensitive vulnerability and customer information • Coordinate with Engineering, DevOps, NOC, Support, Product and Compliance to reduce measurable exposure without disrupting customer service

🎯 Requirements

• 5+ years of hands-on experience in vulnerability management, vulnerability assessment, security engineering, product security, cloud security or a closely related discipline • Enterprise scanning and vulnerability-management workflow experience, including scanner configuration, authenticated scanning, coverage analysis, finding validation, false-positive handling, remediation tracking and rescanning • Strong CVE analysis skills, including determining applicability and exploitability using versions, configurations, exposure, reachability, privileges, controls and business context • Experience with enterprise vulnerability platforms and complementary cloud, container, dependency, application and open-source scanning tools • Working knowledge of CVE/CWE, NVD, CVSS, CISA KEV, EPSS, vendor advisories, software bills of materials and risk-based prioritization • Hands-on knowledge of Linux, TCP/IP, DNS, TLS/PKI, identity and access controls, APIs, cloud infrastructure, containers and Kubernetes • Ability to read code, package manifests, container images, configurations, logs and network evidence • Scripting or programming ability in Python, Go, PowerShell, Bash or a comparable language • Experience integrating security platforms with APIs, ticketing and dashboards • Strong written and verbal communication skills for explaining technical risk, uncertainty, tradeoffs and decisions • Bachelor’s degree in cybersecurity, computer science, engineering or equivalent practical experience • Ability to work primarily during normal business hours with escalation availability for critical, actively exploited or zero-day vulnerabilities • Ability to handle sensitive vulnerability, exploit and customer information with strict need-to-know access and evidence controls • Ability to coordinate intrusive scans, validation tests and production-impacting work through approved change and maintenance processes • Willingness and ability to participate in an on-call rotation • Must be eligible to work without visa sponsorship; AXON Networks is unable to offer visa sponsorship

🏖️ Benefits

• Fully remote within North America • On-call escalation availability for critical, actively exploited or zero-day vulnerabilities • Equal-opportunity and inclusive working environment