Vulnerability Assessment Automation Engineer
About the role
hiring for a large financial services client. You will build the automation behind a vulnerability assessment team in cyber threat intelligence. The goal is simple. Assess more vulnerabilities, faster, without adding people at the same rate that volume grows.
What you will do
Automatically pull in vulnerability disclosures and vendor advisories
Match them to the organization's technology, including products, versions, configurations, and internet exposure
Apply the team's risk scoring method consistently
Flag vulnerabilities that need an emergency response
Generate summaries and leadership reports
What you bring
8+ years in engineering, with 3+ years in security automation
Strong Python (or similar) and API integration skills
Experience ingesting CVE and NVD data, vendor advisories, and CISA KEV feeds, and mapping them to an asset inventory or CMDB
Risk scoring logic, including CVSS, EPSS, exposure, and asset criticality
Experience generating reports and summaries
Nice to have
SOAR tools such as Cortex XSOAR, Splunk SOAR, Tines, or Torq
LLM or GenAI assisted summarization
ServiceNow integrations
Attack surface management
Cloud asset context in AWS or Azure
Preferred certifications
Optional: GCTI, other GIAC certifications, and cloud security certifications
Technology and frameworks
Python, CVE and NVD data, vendor advisories, CISA KEV feeds, asset inventory or CMDB, SOAR (Cortex XSOAR, Splunk SOAR, Tines, Torq), ServiceNow, and AWS or Azure asset context.