Vulnerability Management Engineer at Paragon Cyber Solutions

United States

<p>Paragon Cyber Solutions is a woman-, veteran-, and minority-owned cybersecurity and IT services firm that supports government and commercial clients with compliance, cyber defense, and mission-focused technology solutions. Our team takes pride in solving complex technical challenges and delivering innovative, customer-focused outcomes.</p><p>The Vulnerability Management Engineer III is responsible for leading vulnerability identification, assessment, prioritization, remediation tracking, and reporting activities across enterprise environments. This role serves as a subject matter expert on vulnerability management platforms, security risk analysis, automation, and compliance reporting.</p><p></p><p>This position is contingent upon contract award.</p> <ul><li>Administer and optimize enterprise vulnerability management platforms.</li><li>Conduct vulnerability scanning, assessment, and remediation tracking.</li><li>Analyze CVEs, CVSS scores, threat intelligence, and exploitability.</li><li>Develop remediation plans with system owners and infrastructure teams.</li><li>Automate vulnerability reporting, ticketing, and remediation workflows.</li><li>Produce executive-level dashboards and security metrics.</li><li>Support federal audits, security assessments, and compliance activities.</li><li>Develop standard operating procedures and platform documentation.</li><li>Improve asset inventory accuracy and vulnerability coverage.</li><li>Assist with patch management coordination and verification.</li></ul><p></p><p>Education</p><ul><li>Bachelor's degree or equivalent experience.</li></ul><p>Experience</p><ul><li>5+ years of vulnerability management or security engineering experience.</li><li>Experience with process automation and reporting.</li><li>Splunk dashboard, reporting, and query development.</li><li>Experience generating scan evidence, mitigation documentation, and audit artifacts.</li><li>Experience supporting federal cybersecurity directives and data calls.</li><li>SOP development for vulnerability management programs.</li></ul><p>Experience with vulnerability assessment platforms such as:</p><ul><li>Tenable</li><li>Qualys</li><li>Rapid7</li></ul><p>Strong experience with:</p><ul><li>Asset management</li><li>Patch management</li><li>Vulnerability remediation workflows</li></ul><p></p><p>Preferred Certifications (one or more):<br /> Must meet IAM Level II IAWF baseline certification standards under DoD 8140/8570.01-M, with at least one of the following:</p><ul><li> CAP (Certified Authorization Professional) </li><li> CASP+ CE (CompTIA Advanced Security Practitioner) </li><li> CISM (Certified Information Security Manager) </li><li> CISSP (or Associate) </li><li> GSLC (GIAC Security Leadership Certification) </li><li> CCISO (Certified Chief Information Security Officer) </li><li> HCISPP (HealthCare Information Security and Privacy Practitioner)</li></ul> <ul> <li>Health Care Plan (Medical, Dental &amp; Vision).</li> <li>Retirement Plan (401K w/ employer matching).</li> <li>Paid Time Off &amp; Paid Federal Holidays.</li> <li>Short and Long-Term Disability.</li> <li>Healthy Work-Life Balance.</li> </ul>