What are the responsibilities and job description for the Vulnerability Management Engineer [SK-10719] position at Skill?
Join a prominent financial technology organization committed to safeguarding digital transactions and protecting sensitive data for millions of customers. This company is a leader in its field, driven by innovation and a dedication to maintaining the highest standards of security and trust in a rapidly evolving digital landscape. As a partner with Aquent, you will contribute to a mission-critical team that values proactive defense and strategic security solutions.
As a Senior Vulnerability Management Engineer, you will be at the forefront of our proactive defense strategy, owning the complete lifecycle of vulnerability reduction across a sophisticated and modern ecosystem. This isn’t just about running scans; it’s about deeply analyzing data, identifying critical exposures, and collaborating across engineering teams to neutralize threats before they can impact our operations or customers. Your expertise will directly enhance our security posture and safeguard our digital infrastructure, making a tangible impact on the security and resilience of our services.
Key Responsibilities
About Skill
Skill connects the best professional, IT, engineering, financial and administrative talent with the world's biggest brands. Our eligible talent get access to benefits such as health benefit contributions, retirement plans with match and flexible spending accounts.
Skill is an equal-opportunity employer. We evaluate qualified applicants without regard to age, race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics. We’re about creating an inclusive environment-one where different backgrounds, experiences, and perspectives are valued, and everyone can contribute, grow their careers, and thrive.
As a Senior Vulnerability Management Engineer, you will be at the forefront of our proactive defense strategy, owning the complete lifecycle of vulnerability reduction across a sophisticated and modern ecosystem. This isn’t just about running scans; it’s about deeply analyzing data, identifying critical exposures, and collaborating across engineering teams to neutralize threats before they can impact our operations or customers. Your expertise will directly enhance our security posture and safeguard our digital infrastructure, making a tangible impact on the security and resilience of our services.
Key Responsibilities
- Advanced Triage & Validation: Validate and prioritize vulnerability findings from internal/external scans, attack surface management tools, and threat intelligence, effectively separating critical signals from background noise.
- Risk-Based Prioritization: Assess real-world severity, exploitability, business impact, and compensating controls to drive a smart, risk-based remediation strategy.
- Stakeholder Collaboration: Act as the bridge between security and engineering, guiding technology owners through routing, remediation tracking, and closure validation processes.
- Rapid Threat Response: Support critical events and zero-day escalations by quickly mapping blast radiuses, identifying owners, and tracking emergency remediation efforts.
- Process Optimization: Identify recurring risk patterns and data quality issues, recommending automation or tooling improvements to streamline security operations and enhance efficiency.
- Experience: 3 years of dedicated, hands-on experience in Vulnerability Management within an enterprise-scale environment.
- Core Tooling: Proven proficiency with enterprise vulnerability scanning platforms (specifically Qualys, Tenable/Nessus, or Wiz).
- Modern Architecture: Solid understanding of vulnerability lifecycles across cloud platforms (AWS, Azure, or GCP) and containerized workloads (Kubernetes, Docker).
- Data Savvy: Experience manipulating large datasets and vulnerability reports to extract actionable insights.
- Communication: Exceptional ability to translate complex technical vulnerabilities into clear, actionable remediation steps for both systems engineers and non-technical business leaders.
- Automation & Scripting: Ability to write scripts or utilize APIs (Python, PowerShell, SQL, or Power Query) to automate repetitive validation and reporting tasks.
- Regulated Environments: Experience navigating security compliance in financial services or highly regulated sectors (PCI DSS, FFIEC).
- Data Visualization: Experience building dashboards in Power BI or Excel to track remediation metrics and trends.
- Modern Workflows: Familiarity with AI-assisted productivity tools or prompt-based workflows for data analysis.
- Certifications: Security , CySA , CISSP, or cloud provider security certifications.
About Skill
Skill connects the best professional, IT, engineering, financial and administrative talent with the world's biggest brands. Our eligible talent get access to benefits such as health benefit contributions, retirement plans with match and flexible spending accounts.
Skill is an equal-opportunity employer. We evaluate qualified applicants without regard to age, race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics. We’re about creating an inclusive environment-one where different backgrounds, experiences, and perspectives are valued, and everyone can contribute, grow their careers, and thrive.
Salary : $90 - $92