Senior Cyber Risk Vulnerability Management Engineer

Title: Senior Cyber Risk Management Engineer (Vulnerability Management)
Location: (Preference: Oakland, CA / Rancho Cordova, CA / Alpharetta, GA)
Working Mode: Remote
We are seeking a Senior Cyber Risk Management Engineer with strong expertise in Vulnerability Management, Vulnerability Assessment, Risk Analysis, and Infrastructure Security. This role will support enterprise-wide vulnerability management operations by investigating, validating, prioritizing, and driving remediation of security vulnerabilities across complex infrastructure, network, middleware, platform, and DevOps environments.
The ideal candidate will have hands-on experience with Rapid7 InsightVM/Nexpose, Qualys VM, Nucleus, CVE analysis, vulnerability validation, risk acceptance processes, remediation coordination, and enterprise security operations.
Must-Have Skills:
Vulnerability Management & Vulnerability Assessment
Rapid7 InsightVM/Nexpose, Qualys VM, Nucleus
CVE, CVSS, Vulnerability Validation & Risk Analysis
Infrastructure, Network, Server & OS Security
Vulnerability Remediation & Risk Acceptance
Security Advisories, Threat Intelligence, CISA KEV, EPSS
Experience working with Infrastructure, Platform, Middleware, and DevOps teams
Jira, Ivanti, or similar ticketing tools
Responsibilities:
Investigate and validate vulnerability findings.
Analyze CVEs, exploitability, patches, and remediation options.
Drive remediation efforts and track vulnerabilities through closure.
Support risk acceptance and exception processes.
Partner with technical teams to reduce enterprise cyber risk.

Work arrangement
Yes