Note: The job is a remote job and is open to candidates in USA. 11:11 Systems is seeking a Security Engineer with deep expertise in Vulnerability and Threat Management to lead the identification and remediation of security risks across its enterprise infrastructure. This role involves hands-on engineering with strong experience in vulnerability scanning platforms and threat intelligence integration within complex environments.
Responsibilities
- Lead and mature the design, implementation, and optimization of enterprise Vulnerability & Threat Management programs
- Operate and tune vulnerability scanning tools (e.g., Rapid7 InsightVM, Tenable, Qualys) across on-prem and cloud environments
- Analyze vulnerability data, prioritize remediation based on risk, exploitability, and business impact
- Integrate threat intelligence feeds and SIEM platforms to enhance detection and response capabilities
- Collaborate with infrastructure, network, and application teams to drive remediation efforts and reduce risk exposure
- Align vulnerability management processes with compliance frameworks (NIST 800-53, CIS Benchmarks, PCI-DSS, ISO 27001), including audit preparation and evidence collection
- Automate vulnerability remediation and reporting workflows using PowerShell, Ansible, or similar tools
- Perform root cause analysis of recurring vulnerabilities and recommend long-term mitigation strategies
- Support and validate patch management processes (WSUS, Automox), ensuring timely remediation aligned with SLAs and compliance requirements
- Develop, define and enforce policies and procedures surrounding secure configuration baselines in accordance with CIS benchmarks and established best practices
- Generate compliance and risk posture reports and dashboards as required
- Lead incident response and threat hunting activities and define processes
- Leverage AI in daily activities to enhance our ability to assess, identify and remediate emerging threats and existing vulnerabilities
Skills
- 5+ years of experience in cybersecurity, with a strong focus on vulnerability and threat management
- Strong understanding of CVSS scoring, exploit frameworks, and risk-based prioritization
- Experience managing enterprise Windows and Linux environments
- Strong understanding of virtualization platforms (VMware vSphere/ESXi/VCF) and cloud platforms (AWS, Azure)
- Scripting and automation experience (PowerShell, Python, Bash, or Ansible)
- Knowledge of network security concepts (firewalls, IDS/IPS, segmentation)
- Must be able to work in the US without a visa sponsorship
- Advanced analytical and problem-solving skills
- Ability to translate technical risk into business impact
- Effective cross-team collaboration and communication
- Proactive approach to risk reduction, threat mitigation and continuous improvement
- Ability to lead efforts and define policies and procedures within the enterprise
- Hands-on experience with vulnerability management platforms (Rapid7 InsightVM preferred)
- Experience with SIEM tools used for correlating and reporting. (Rapid7 Insight DR, FortiSIEM)
- Experience managing endpoint protection tools (Symantec Endpoint Protection, Defender, Trend VisionOne)
- Practical experience in Penetration testing and/or red team/blue team activities (network, infrastructure, and/or web applications) and tools used in these activities
- Knowledge of OWASP Top 10 and common web application security risks
- Familiarity with container and Kubernetes security
- Relevant certifications (CISSP, CEH, GIAC, or equivalent)
Benefits
- Comprehensive healthcare plan options
- Retirement plan with company match
- Life, other supplemental insurances
- Paid time off and company holidays
- New Parent Leave
- Wellness programs
Company Overview