Position: Cybersecurity Engineer
Location: Remote
Hiring Mode: 12 Months Contract
Job Description:
Triage newly disclosed vulnerabilities and determine their relevance and potential impact to enterprise applications and assets.
Assess vulnerability exploitability using threat intelligence, exploit and proof-of-concept information, and likely attack paths.
Clearly document potential exposure, impact, and risk.
Assign firm-aligned severity and risk ratings mapped to recognized industry standards, including Common Vulnerabilities and Exposures (CVE), Common Platform Enumeration (CPE), and Common Vulnerability Scoring System (CVSS), with clear supporting rationale.
Maintain high-quality, audit-ready case notes and supporting documentation.
Support follow-the-sun business-as-usual vulnerability management operations and urgent escalations.
Prioritize multiple vulnerabilities and operational activities based on risk and urgency.
Qualifications:
Strong, hands-on experience with vulnerability triage and risk assessment across the end-to-end vulnerability management lifecycle.
Strong working knowledge of CVE, CPE, and CVSS.
Demonstrated ability to interpret vulnerability disclosures, security advisories, threat intelligence, and exploit information to assess real-world risk.
Strong technical writing and communication skills, with the ability to clearly document impact, recommended actions, priorities, and risk rationale.
Broad familiarity with enterprise technology platforms and associated patch and release lifecycle considerations.
Experience working with cloud environments and large-scale open-source technology usage within enterprise environments.
Strong prioritization and multitasking skills with an operations-focused mindset.
Tools and Technologies:
CVE, CPE, and CVSS vulnerability standards
Vulnerability management and risk assessment processes
Threat intelligence and exploit/proof-of-concept analysis
Microsoft technologies
VMware
Oracle and Java
Citrix
F5
Cloud environments
Enterprise open-source technologies