Vulnerability Management Engineer II

Vulnerability Management Engineer II

Location: This job is available to work in one of our hub locations: Tampa, FL; Denver, CO; DC metro area, CA (Bay area), Austin, TX and will be hybrid. Tampa preferred

Reporting to the Sr. Manager, Platform Security Services, the Vulnerability Management Engineer II is responsible for the development, ongoing operation, and maturity of assigned customers' Vulnerability Management Programs.  You will implement and troubleshoot scanning technologies to discover and prioritize security flaws for remediation, as well as collaborate with stakeholders to facilitate the remediation and closure of vulnerabilities, and their VM program effectiveness.

On a daily basis, you will be challenged with differing environments, new threats, new ways of tackling problems and identifying solutions to meet the needs of Deepwatch customers.  The standard Vulnerability Management program is an ever evolving world that you can be at the helm of defining.

In this role you’ll get to: 

• Guide customers on their VM program maturity journey, and be the expert they look to for guidance
• Directly impact customer maturity by implementing the best practices based on each customer’s unique environment
• Be involved at a program level with analyzing vulnerabilities and the subsequent remediation plans to ensure the VM program is on track with the Deepwatch vision and needs of the customer
• Perform advanced  analysis of vulnerabilities to understand how they operate, and affect customer environments
• Create new pathways to maturing a Vulnerability Management program
• `Work with the development team to identify new and interesting ways to automate daily tasks
• Mentor junior engineers
• Collaborate with with leadership to constantly improve service offerings

To be successful in this role, you’ll need to: 

• Apply the analysis and vulnerability management methodologies you've used in your previous roles to build appropriate program guidance and recommendations
• Mentor junior engineers on how to enhance customer experience and capabilities through our direction of their VM program maturity journey, and build custom solutions within the deepwatch maturity framework to suit customer needs
• Perform in depth analysis of vulnerabilities and data to determine if their VM solution is working properly, troubleshoot if necessary, and enhance the customer’s capabilities and security posture of their environment
• Through analysis, recommend advanced scanning methodologies to improve overall visibility in the customer environment while researching and developing new ways of enhancing VM programs
• Apply your knowledge of how an organization currently operates and identify what capabilities are missing, how to enhance current capabilities, or provide solid recommendations on how an organization can and should proceed
• Work with customers to get them onboard and up-to-speed with Deepwatch’s VM maturity program by identifying what strategies customers have been using, how effective they have been, and progress they have made.  Analyze and determine deficiencies and areas for improvement.
• Handle first level escalations as necessary, and escalate to Manager if resolution is not possible
• Technical Capabilities:
• Code Development (Python, PowerShell, etc.), experience with simple scripting with ability to become more advanced in this area.  You will get to work with customer configurations, as well as build scripts to handle day-to-day tasks.
• Vulnerability Management Toolset (Tenable.IO, Tenable.SC, Qualys, Kenna, etc), should show proficiency and have an in-depth understanding of how the tools work.  You will be expected to configure, operationalize and export data for customers, as well as perform troubleshooting and handle escalation requests.

ITAR Compliance

This position will have access to customer data and as such is subject to International Traffic in Arms Regulations (ITAR). Upon application, candidates will be asked to confirm that they are a U.S. Person as defined by the following:

• A citizen of the U.S.;
• A lawful permanent resident of the United States; 
• A person admitted to the United States as a refugee; or
• A person that has been granted asylum by the United States government.”

The intent of this requirement is not to verify employment eligibility overall, but to ensure compliance with import/export regulations. If you do not meet these requirements, we encourage you to apply for other open roles at Deepwatch. This information will be verified upon offer of employment.

The anticipated salary range for this role is $80,000 to $100,000 + stock options + benefits. Actual compensation may vary from posted hiring range based upon geographic location, work experience, education, and/or skill level.