Engineer III, Vulnerability Management

🔥 0 minutes ago

🤠 Texas – Remote

🤠 Texas – Remote

⏰ Full Time

🟠 Senior

🔴 Lead

👷🏻‍♀️ Engineer

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Cencora

WebsiteLinkedInAll Job Openings

10,000+ employees

💼 Consulting

📦 Logistics

🏥 Healthcare

Consulting • Logistics • Healthcare

Cencora is a company dedicated to improving the health and well-being of both people and animals globally. Built on the legacy of AmerisourceBergen, Cencora offers a wide range of industry-leading solutions that encompass specialty logistics, warehousing, drug research, clinical development support, and more. They provide commercialization and patient access support and offer wholesale and specialty distribution services. Cencora serves a diverse clientele, including pharmaceutical companies, physician practices, pharmacies, and health systems. The company also extends its services to animal health, managing operations and delivering products for animal pharmaceutical care. With a strong global footprint, Cencora aims to reshape healthcare delivery through innovative products and solutions, striving to create healthier futures for all.

📋 Description

• Perform advanced vulnerability analysis across infrastructure, cloud, endpoint, network, application, SaaS, and externally facing assets • Lead and support Continuous Threat Exposure Management (CTEM) processes, including scoping, discovery, prioritization, validation, mobilization, and ongoing risk reduction • Operate and improve vulnerability management, attack surface management, external posture management, cloud posture, and SaaS posture capabilities • Analyze and normalize vulnerability and posture data and develop risk-based remediation priorities • Assess vulnerabilities using business context, asset criticality, exploitability, threat intelligence, exposure, compensating controls, and regulatory or compliance impact • Drive remediation and risk treatment with infrastructure, cloud, network, application, endpoint, DevOps, and business technology teams • Lead emerging vulnerability and critical exposure response, including impact analysis, stakeholder coordination, mitigation tracking, and executive-level reporting • Create and maintain dashboards, metrics, and reporting for vulnerability trends, remediation progress, SLA performance, exposure reduction, attack surface changes, and program maturity • Support unified vulnerability management workflows, including ticketing, ownership assignment, exception handling, rescan validation, remediation automation, and governance • Evaluate and recommend improvements to scanning coverage, asset inventory quality, vulnerability data integrity, risk scoring, and stakeholder reporting • Translate technical findings into remediation guidance and concise risk summaries for leadership • Contribute to security standards, procedures, playbooks, documentation, and continuous improvement initiatives • Mentor junior engineers and analysts on vulnerability triage and remediation governance

🎯 Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Information Technology, Engineering, or a related field, or equivalent practical experience • 7–10 years of combined experience in information technology, cybersecurity, systems administration, cloud operations, network security, application security, security engineering, or related disciplines • At least 4 years of hands-on experience in vulnerability management, exposure management, attack surface management, configuration assurance, or a closely related cybersecurity function • At least one active cybersecurity certification, such as CISSP, CISM, Security+, CySA+, GSEC, CCSK, CCSP, OSCP, GIAC certification, or another recognized security certification • Strong understanding of vulnerability lifecycle management, including discovery, validation, prioritization, remediation, exception handling, rescan validation, and reporting • Experience with vulnerability assessment or vulnerability management platforms such as Qualys, Tenable, Rapid7 InsightVM, Microsoft Defender Vulnerability Management, Wiz, Armis, or comparable tools • Experience with attack surface, posture, or exposure management capabilities such as CAASM, EASM, RBVM, CSPM, SSPM, external posture management, or security ratings platforms • Ability to interpret CVEs, CVSS, EPSS, threat intelligence, exploitability indicators, asset context, and compensating controls to prioritize risk • Experience with enterprise asset data, CMDB data, ownership models, assignment groups, and business criticality attributes • Experience using Excel, Power BI, SQL, data lakes, reporting platforms, or other data analysis and visualization tools • Working knowledge of NIST CSF, NIST 800-53, ISO 27001, CIS Critical Security Controls, PCI DSS, HIPAA, GDPR, OWASP Top 10, SANS Top 25, and MITRE ATT&CK • Excellent written and verbal communication skills • Demonstrated ability to coordinate cross-functional remediation activities in a complex enterprise environment • Preferred: experience building or maturing CTEM, exposure management, or unified risk-based vulnerability management programs • Preferred: experience with vulnerability workflow automation, ServiceNow SecOps, Jira, SOAR, or similar platforms • Preferred: experience consolidating and normalizing vulnerability data across multiple source tools • Preferred: cloud security and cloud posture management across AWS, Azure, Google Cloud, or hybrid environments • Preferred: external attack surface management, SaaS security posture management, configuration assurance, or third-party exposure management • Preferred: regulatory, audit, customer assurance, or compliance reporting experience • Preferred: scripting or automation using Python, PowerShell, APIs, or query languages • Ability to influence without direct authority and lead cross-functional initiatives

🏖️ Benefits

• Medical, dental, and vision care • Backup dependent care • Adoption assistance • Infertility coverage • Family building support • Behavioral health solutions • Paid parental leave • Paid caregiver leave • Training programs • Professional development resources • Mentorship programs • Employee resource groups • Volunteer activities