Vulnerability Management Engineer

Job not on LinkedIn

🔥 7 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

CTI Staffing

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 1998

🎯 Recruiter

🤝 B2B

Recruitment • B2B

CTI Staffing is a staffing and recruiting firm that specializes in onshore and nearshore talent solutions across the US, Canada and LATAM. The company places candidates in contract and permanent roles, offers services for both candidates and hiring organizations, and emphasizes cultural fit and long-term partnerships. With 25+ years of experience and a LATAM headquarters for nearshore engagement, CTI focuses on building teams quickly and supporting clients with tailored recruiting and staffing processes.

📋 Description

• Reconcile asset data across vulnerability scanners, endpoint security platforms, identity sources, and the CMDB to identify coverage gaps • Aggregate and de-duplicate vulnerability findings and baseline the current-state posture • Enrich findings with exploit intelligence (CVSS, EPSS, CISA KEV, validated-exploitable status) and produce a risk-ranked register • Build and configure the ServiceNow Vulnerability Response remediation workflow, including SLAs and an exception/risk-acceptance process • Drive initial remediation waves on highest-risk exposures in partnership with asset owners • Report program metrics and provide weekly status to security leadership • Author operational runbooks and operate the program in steady state • Apply AI tools to accelerate de-duplication, analysis, prioritization, and reporting

🎯 Requirements

• Hands-on experience operating enterprise vulnerability tooling, including Tenable and CrowdStrike (Falcon Spotlight / Exposure Management) • ServiceNow Vulnerability Response / SecOps workflow build experience • Risk-based prioritization using CVSS, EPSS, and CISA KEV • Remediation orchestration across infrastructure and application owners, including SLA design • Metrics and executive-ready reporting • Proficiency applying frontier AI models (e.g., ChatGPT Enterprise, Claude) to security engineering work • US Citizenship required (client cannot provide sponsorship)

🏖️ Benefits

• This is a remote position • Contract engagement with right-to-hire potential