Back to Jobs
Recently postedRemoteTechnology

Vulnerability Management SME / Remote

MetaRPOUnited States🇺🇸United States

Quick overview

Salary$55/hr
SeniorityMid Senior
Work modeRemote
LocationUnited States
AWSCompliancePowerShellPythonServiceNowAzureData AnalysisLinux

Job description

Job Opening: Vulnerability Management SME / Remote
Contact:
Duration : 3 months
Rate : $55/hr on C2C / 45/hr on W2
Work: 100% Remote
Job Summary
We are looking for a hands-on, technical Vulnerability
Management SME with strong experience conducting
enterprise-level Vulnerability Management (VM) assessments.
The ideal candidate must have personally delivered at least
two end-to-end enterprise Vulnerability Management program
assessments and possess 7+ years of hands-on technical
experience. This role requires direct experience working with
vulnerability management tools, analyzing scan results,
validating findings, identifying security risks, and developing
a risk-based remediation roadmap.
This is a technical role, not a governance-only or project
management position.
Required Skills & Experience
  • 7+ years of hands-on Vulnerability Management experience.
  • Must have personally delivered at least 2 end-to-end enterprise Vulnerability Management program assessments.
  • Strong hands-on administration experience with at least one of the following tools: Tenable Security Center / Qualys VMDR Rapid7 InsightVM Microsoft Defender Vulnerability Management
  • Experience configuring vulnerability scans, credentials, scanning policies, agents, tuning, and reporting.
  • Ability to technically validate vulnerability findings and identify false positives, scan coverage gaps, and authentication issues.
  • Strong technical knowledge of Windows, Linux, network devices, AWS, and Azure environments.
  • Experience developing risk-based vulnerability prioritization models using CVSS, EPSS, CISA KEV, and asset criticality.
Roles & Responsibilities
  • Review vulnerability scan configurations, scan coverage, credentialed scan success rates, and asset inventory accuracy directly within VM tools.
  • Analyze vulnerability data, including vulnerability aging, recurrence, SLA compliance, and remediation trends.
  • Assess the organization's Vulnerability Management program maturity against NIST CSF and CIS Controls.
  • Develop risk-based vulnerability prioritization models.
  • Define remediation SLAs, prioritization matrices, and vulnerability exception processes.
  • Identify gaps in existing vulnerability management processes and recommend improvements.
  • Prepare a comprehensive technical assessment report and a 12-month improvement roadmap.
  • Present findings and recommendations to executive stakeholders.
Preferred Qualifications
  • Experience with Python or PowerShell scripting for vulnerability data analysis and API automation.
  • Experience integrating vulnerability management tools with ServiceNow, SCCM, or Microsoft Intune.
  • Relevant certifications such as OSCP, GIAC (GEVA/GPEN), CISSP, Tenable, or Qualys certifications.

Similar jobs