Vulnerability Management Engineer

Job not on LinkedIn

🔥 5 minutes ago

🏈 Alabama, Arizona, +13 more states – Remote

🏈 Alabama – Remote 🌵 Arizona – Remote ⛰️ Colorado – Remote 🐊 Florida – Remote 🥔 Idaho – Remote 🌽 Illinois – Remote ⚜️ Louisiana – Remote 🌲 North Carolina – Remote 🌪️ Oklahoma – Remote 🌲 Oregon – Remote ❄️ Minnesota – Remote 🔔 Pennsylvania – Remote ⚓ Rhode Island – Remote 🎸 Tennessee – Remote 🤠 Texas – Remote

💵 $128.6k - $184.9k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👷🏻‍♀️ Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Cisco

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1984

🔧 Hardware

🔐 Security

🏢 Enterprise

Hardware • Security • Enterprise

Cisco is a multinational technology company that provides networking hardware, software, and services to enterprises, service providers, and governments. It builds routers, switches, optical transceivers, programmable silicon, and edge computing platforms, and offers security, collaboration (Webex), observability, and AI-enabled software and support services to help organizations design, operate, and secure large-scale networks and data centers. Cisco also delivers professional services, training, and cloud-managed solutions to support digital transformation and AI-ready infrastructure.

📋 Description

• Lead vulnerability assessments and establish vulnerability management standards • Assess, prioritize, and remediate security vulnerabilities across complex infrastructure • Turn complex security data into clear, actionable insights • Partner directly with engineering teams to address risks and complete critical fixes • Assess and apply configuration compliance standards to harden infrastructure and cloud environments • Prioritize vulnerabilities based on business impact and technical risk • Navigate audits and compliance requirements • Support a defense strategy protecting Cisco and its customers • Query tooling output, visualize security data, and build vulnerability-tracking dashboards using Splunk and SPL • Integrate security scanning tools into CI/CD pipelines • Audit Infrastructure as Code for configuration errors before deployment • Translate technical security risks for engineering teams and executive stakeholders • Research and adapt to emerging security threats and technologies • Configure and manage enterprise vulnerability-scanning platforms

🎯 Requirements

• 3+ years of experience in the vulnerability management lifecycle, including assessment, prioritization, and hands-on remediation of security vulnerabilities within complex infrastructure • Experience assessing or applying configuration compliance standards such as CIS Benchmarks and DISA STIGs • Experience hardening infrastructure and cloud environments to meet regulatory requirements such as PCI DSS, SOC2, HIPAA, and FedRAMP • Experience using threat modeling and CVSS scoring to prioritize vulnerabilities based on business impact and technical risk • Experience securing containerized environments and orchestration platforms, specifically Docker and Kubernetes • Technical experience with cloud operational models and security requirements of SaaS architectures built on microservices • Preferred: experience using Splunk and Search Processing Language (SPL) • Preferred: experience integrating or using security scanning tools in CI/CD pipelines • Preferred: experience auditing Infrastructure as Code such as Terraform and CloudFormation • Preferred: ability to translate complex technical security risks into actionable insights • Preferred: self-motivation, continuous self-learning, and independent research of emerging threats and technologies • Preferred: hands-on configuration and management of enterprise scanning platforms such as Tenable, Qualys, and Rapid7 • Must be a U.S. Person for work on U.S. Government classified environments • May need to be a U.S. citizen for work specified by the U.S. government to be performed only by U.S. citizens on U.S. soil

🏖️ Benefits

• Medical, dental and vision insurance • 401(k) plan with a Cisco matching contribution • Paid parental leave • Short- and long-term disability coverage • Basic life insurance • Cisco restricted stock unit grants may be available, subject to continued employment and vesting periods • 10 paid holidays per full calendar year • 1 floating holiday for non-exempt employees • 1 paid day off for employee’s birthday • Paid year-end holiday shutdown • 4 paid days off for personal wellness • 16 days of paid vacation per full calendar year for non-exempt employees • Flexible vacation time off program with no defined limit for eligible exempt employees, subject to availability and business limitations • 80 hours of sick time off provided on hire date and each January 1st thereafter • Up to 80 hours of unused sick time carried forward annually • Additional paid time away for critical or emergency family issues • Optional 10 paid volunteer days per full calendar year • Annual bonuses for non-sales roles, subject to Cisco policies • Performance-based incentive pay for sales-plan employees • Professional growth and development opportunities