Infrastructure Vulnerability Engineer

Role: Infrastructure Vulnerability Engineer

Location: Plano TX (Hybrid)

Scope:

·        Core responsibilities to include assessing and promoting remediation for all the assets that reside in all the regions and data centers across the globe.

·        Candidate will be a key member of the centralized information security team.

What you’ll do:

·        Run authenticated and agent-based vulnerability scans across on-prem, cloud, and container environments, and report findings.

·        Publish vulnerability status reports and dashboards to senior management and track remediation against defined SLAs.

·        Define and participate in implementation of On-prem and Cloud architecture and security controls.

·        Proactively identify emerging threats and actively exploited vulnerabilities, and prioritize remediation using risk context (CVSS, EPSS, CISA KEV, asset criticality).

·        Partner with infrastructure, cloud, and application teams to drive remediation, validate fixes, and manage risk exceptions.

·        Maintain security by monitoring and ensuring compliance to standards, policies, and procedures; conducting incident response analyses; developing and conducting training programs.

·        Identify gaps in scan coverage and asset inventory, and recommend tooling and process improvements, including automation.

·        Participate in and assist with incident response team, as appropriate.

·        Generate metrics (e.g., mean time to remediate, SLA compliance, risk trends) for management as needed.

·        Prepare system security reports by collecting, analyzing, and summarizing data and trends.

What we are looking for: 

·        3–5 years of experience in information security, vulnerability management, or penetration testing; a relevant master’s degree may substitute for up to two years of experience.

·        Experience in vulnerability and threat management, including gathering and condensing threat intelligence into actionable and meaningful communication materials.

·        Bachelor’s degree in information security, information technology, computer science, or a related STEM field, or equivalent practical experience.

·        Working knowledge of network security architecture, segmentation, and secure configuration.

·        Solid understanding of network, system, and endpoint security.

·        Experience with public cloud platforms (AWS, Microsoft Azure, Google Cloud) and cloud security tooling such as CSPM/CNAPP (e.g., Wiz, Prisma Cloud, Microsoft Defender for Cloud).

·        Familiarity with security frameworks and regulatory requirements such as NIST CSF 2.0, CIS Controls, ISO 27001/27002, and SOC 2 (SSAE 18).

·        Hands-on experience with modern vulnerability management platforms

·        Practical experience with the development, implementation, and management of security related technologies (e.g., SIEM, EDR, WAF, next-generation firewalls, internet-facing services).

·        Excellent customer service including strong written and oral communication skills.

·        Familiarity with container and Kubernetes security, infrastructure as code (e.g., Terraform), and scripting (Python or PowerShell) to automate scanning, ticketing, and reporting.

·        Demonstrated understanding of information security concepts, standards, practices, including but not limited to firewalls, intrusion prevention and detection, TCP/IP and related protocols, device monitoring and log management and event monitoring/reporting.

·        Certifications such as CompTIA Security+ or CySA+, GIAC (e.g., GCIH, GPEN), OSCP, or a cloud security certification (e.g., AWS Certified Security – Specialty, Microsoft AZ-500) are a plus.

·        Results-focused, with strong attention to detail.

Ability to work a second shift that overlaps with customer hours