Security Engineer

• 5+ years hands-on vulnerability management or security engineering


• Direct implementation experience with at least one enterprise VM platform (Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management, or Tanium)


• Demonstrated experience building prioritization models that incorporate business context, not severity alone


• Scripting and automation to scale program operations: Python and PowerShell, plus REST API integration


• Working fluency with KQL or an equivalent query language for security data


• Experience integrating VM data with CMDB, ITSM, and BI platforms


• Cloud vulnerability management experience across Azure and at least one other provider


• Ability to work independently and produce written deliverables without heavy oversight

Preferred

• Experience with Tanium and Microsoft Defender for Endpoint as data sources


• Container and image scanning experience


• Familiarity with NVD, EPSS, KEV, and ExploitDB data feeds and their API consumption patterns


• Exposure to CTEM or exposure management program models


• Certifications: CISSP, GIAC (GEVA, GCIA), AZ-500