Note: The job is a remote job and is open to candidates in USA. New Balance is seeking a Senior Vulnerability Management & SOAR Engineer to lead and mature its enterprise Vulnerability Management Program across applications, infrastructure, cloud services, endpoints, containers, and technology platforms. The role owns vulnerability discovery through remediation and reporting, coordinates risk reduction across technical teams, and develops SOAR playbooks and security automations to improve operational efficiency.
Responsibilities
- Own and continuously mature the enterprise Vulnerability Management Program across on-premises, cloud, containerized, endpoint, network, embedded, and application environments
- Manage the end-to-end vulnerability lifecycle, including discovery, validation, prioritization, remediation tracking, exception management, verification, and reporting
- Operate and optimize vulnerability assessment technologies to ensure comprehensive asset coverage and accurate risk visibility
- Correlate and prioritize findings from vulnerability scanners, application security tools, cloud and container security platforms, attack surface management solutions, and threat intelligence sources
- Apply risk-based methodologies leveraging CVSS, CISA KEV, exploitability, asset criticality, exposure, and business impact to identify and prioritize the most significant threats
- Integrate vulnerability management processes with CI/CD pipelines and software delivery workflows to identify and address security weaknesses earlier in the development lifecycle
- Partner with asset management teams to improve asset inventory accuracy, security coverage, and risk visibility across the enterprise
- Coordinate and drive remediation efforts across technical teams to ensure vulnerabilities are addressed within established service-level objectives and/or sensitivity
- Lead response activities for critical vulnerabilities, zero-day threats, and actively exploited CVEs
- Manage vulnerability exceptions, compensating controls, risk acceptance processes, and periodic exception reviews
- Develop and maintain vulnerability management policies, standards, procedures, runbooks, and reporting frameworks
- Create executive and operational metrics measuring risk reduction, remediation, performance, vulnerability trends, asset coverage, SLA adherence, and MTTR
- Support audits, compliance assessments, and risk management activities through accurate documentation and evidence collection
- Monitor emerging threats, vulnerabilities, exploit trends, and industry best practices to continuously improve program effectiveness
- Design, develop, and maintain SOAR playbooks that automate vulnerability intake, triage, enrichment, ticket creation, remediation tracking, exception handling, and reporting
- Develop integrations between vulnerability management platforms, SOAR, SIEM, ITSM, CMDB, DevOps, and collaboration platforms
- Build scripts, APIs, and automated workflows using technologies such as Python, PowerShell, Bash, and REST APIs to improve operational efficiency and reduce manual effort
- Measure automation effectiveness and recommend technology enhancements that strengthen vulnerability management and security operations capabilities
Skills
- 5+ years of experience in Vulnerability Management, Security Operations, Security Engineering, Cybersecurity Risk Management, or related security disciplines
- 3+ years of directly managing or owning enterprise vulnerability management programs in hybrid cloud and on-premises environments
- Experience administering enterprise vulnerability management platforms such as Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management, or equivalent solutions
- Strong expertise in vulnerability assessment, credentialed scanning, vulnerability validation, risk prioritization, and remediation management
- Deep understanding of CVE, CVSS, CISA KEV, exploit intelligence, threat intelligence, attack surface management, and risk scoring methodologies
- Experience with cloud platforms and cloud security technologies including Azure, AWS, or GCP
- Experience managing vulnerabilities across cloud-native, containerized, and modern application environments
- Scripting and automation experience using Python, PowerShell, Bash, REST APIs, or similar technologies
- Experience building security automations using Microsoft Sentinel, Cortex XSOAR, Splunk SOAR, Swimlane, Tines, or similar platforms
- Familiarity with application security concepts
- Experience developing metrics, KPIs, dashboards, remediation SLAs, and executive reporting for vulnerability management programs
- Strong understanding of operating systems, network infrastructure, software development processes, and enterprise technology environments
- Experience supporting compliance frameworks such as NIST, CIS, ISO 27001, SOC 2, PCI-DSS, CMMC, or similar regulatory requirements is preferred
- Excellent communication and stakeholder management skills with the ability to influence both technical and business audiences
- Industry certifications such as CISSP, CySA+, Security+, GSEC, GCSA, OSCP, GIAC certifications, or equivalent experience are preferred
Benefits
- Three options for medical insurance for regular associates
- Dental insurance for regular associates
- Vision insurance for regular associates
- Life insurance for regular associates
- 401K for regular associates
- Online learning and development courses for regular associates
- Tuition reimbursement for regular associates
- $100 monthly student loan support for regular associates
- Various mentorship programs for regular associates
- A yearly $1,000 lifestyle reimbursement for regular associates
- 4 weeks of vacations for regular associates
- 12 holidays for regular associates
- Generous parental leave for regular associates
- Three options for medical insurance for temporary associates
- Dental and vision insurance for temporary associates
- An associate discount for temporary associates
- 401k for part time associates
- Short term disability for part time associates
- A yearly $300 lifestyle reimbursement for part time associates
- An associate discount for part time associates
- Flexible Work Schedule
- North American hybrid model with associates currently working in office three days per week (Tuesday, Wednesday, and Thursday)
- “Work from Anywhere” (WFA) for four weeks per calendar year
Company Overview
Company H1B Sponsorship