vulnerability management engineer

Oasys

<div><div><b>Who We Are: </b>Oasys International LLC (Oasys) is a fast-growing federal government contractor delivering high-quality technology consulting and professional services to civilian, defense, and homeland security agencies. We have been recognized on Inc. 5000&rsquo;s list of the fastest-growing companies in America for five consecutive years and named a Best Places to Work in Virginia for the past two years.</div><div></div><div><br>
Our success is driven by a talented team of technologists, consultants, engineers, and subject-matter experts who support complex federal missions with integrity and excellence. At Oasys, we foster a collaborative, merit-based culture that values continuous learning, professional growth, and work-life balance. We are committed to creating an inclusive, engaging environment where employees are recognized for their contributions and empowered to build meaningful, long-term careers.</div><div></div><div><b><br>
Position Summary:</b></div><div>
The <b>Vulnerability Management Engineer</b> position supports vulnerability identification, analysis, remediation coordination, and compliance reporting for Federal systems. The role requires strong knowledge of federal cybersecurity frameworks, including NIST 800‑53, NIST 800‑37 RMF, FISMA, FedRAMP, and DoD‑specific controls. The Engineer will work with ISSOs, system owners, security architects, and engineering teams to ensure continuous visibility and reduction of security risks across mission‑critical environments. This role requires expertise in vulnerability scanning, assessment, automation, remediation tracking, and communicating risk to both technical and non‑technical federal stakeholders.</div><div></div><div><b><i><br>
NOTE: This role is contingent on the contract being awarded.</i></b></div><div></div><div><b><br>
Primary Responsibilities:</b></div><div><ul><li>
Plan, schedule, and execute vulnerability scans on federal systems using tools such as Tenable Nessus and Qualys.</li><li>
Analyze scan results, validate findings, eliminate false positives, and prioritize remediation based on criticality, exploitability, and federal impact levels.</li><li>
Support vulnerability discovery across cloud, on‑premises, hybrid, and containerized environments.</li><li>
Ensure vulnerability management activities align with NIST RMF, NIST 800‑53, DOD STIGs, FedRAMP, and agency‑specific guidelines.</li><li>
Contributes to the creation, maintenance, and tracking of POA&amp;Ms, ensuring compliance with federal deadlines and reporting requirements.</li><li>
Collaborate with ISSOs and system owners to support Security Control Assessments (SCAs) and audits.</li><li>
Work closely with system administrators, developers, network engineers, and cloud teams to drive timely remediation of vulnerabilities.</li><li>
Prepare compliance reports for federal leadership, auditors, ISSOs, and system owners.</li><li>
All other duties as assigned by management.</li></ul></div><div></div><div><b><br>
Skills and Qualifications:</b></div><div><ul><li>
Bachelor&rsquo;s degree in computer science or related field</li><li>
8+ years in Cybersecurity and Risk Management Framework</li><li>
Experience with vulnerability scanning tools (Nessus or Qualys)</li><li>
Experience performing risk assessments for Federal systems in AWS GovCloud</li><li>
Experience supporting FedRAMP High/Moderate systems</li><li>
Knowledge in Java, Python, HTML, SQL, CSS and cloud computing</li><li>
Excellent communication and management skills.</li></ul></div><div></div><div><b><br>
Certifications Required:</b></div><div><ul><li>
Certified Information Systems Security Professional (CISSP)</li><li>
CompTIA Security +</li></ul></div><div></div><div><b><br>
Security Clearance Requirements:</b></div><div><ul><li>
Must be a U.S. Citizen</li><li>
Must have an active DoD Secret clearance.</li></ul></div><div></div><div><b><br>
Work Location:</b></div><div><ul><li>
Fairfax, VA &ndash; Corporate Headquarters (Hybrid)</li></ul></div><div></div><div><b><i><br>
NOTE: This role is contingent on the contract being awarded.</i></b></div><div></div><div><b><i><br>
Oasys is proud to be an equal opportunity employer for all protected groups, including protected veterans and individuals with disabilities.</i></b></div></div>

Vulnerability Management Engineer

Zoom Communications

<div><div><ul><li>R18822
</li></ul></div><div><ul><li>Remote, United States
</li></ul></div><div><ul><li>Cyber Security &amp; Risk
</li></ul></div><div><ul><li>Full time</li></ul></div></div>
<br><div>Immigration sponsorship is not available for this position<p><b>
What you can expect</b></p><p>
The Security Vulnerability Management Engineer will work closely with Information Security Engineers and cross-functional IT teams to ensure appropriate security controls are in place and that security policies are effectively implemented across the organization.<br>
<br>
This role is responsible for operating and maturing the vulnerability management program, leading stakeholder engagements, and providing regular updates to leadership on scanning results, risk posture, and remediation efforts.</p><p><b><br>
About the Team</b></p><p>
You will be part of a high-performing, experienced team responsible for maintaining FedRAMP and IL4 compliance for Zoom for Government and Zoom for Defense - our offerings to the U.S. Government. In this role, you will actively scan, monitor, manage, and report on vulnerabilities (CVEs), contribute to monthly POA&amp;M reporting, and analyze and recommend remediation strategies. Your work will directly support maintaining the authorizations required to deliver secure services to U.S. Government customers.</p><p></p><p><b>
Responsibilities</b></p><ul>
<li><p>
Conducting vulnerability scans across systems, networks, endpoints, and applications.</p></li>
<li><p>
Validating, prioritizing, and driving remediation of identified vulnerabilities</p></li>
<li><p>
Partnering with engineering and IT teams to track and improve patching cadence.</p></li>
<li><p>
Owning vulnerability reporting, including tracking remediation status and risk exposure.</p></li>
<li><p>
Maintaining and optimize vulnerability scanning tools and schedules.</p></li>
<li><p>
Integrating vulnerability management tools with SIEM platforms.</p></li>
<li><p>
Developing dashboards and metrics to provide visibility into security posture for leadership.</p></li>
<li><p>
Creating and improving tools, documentation, processes, and techniques to support vulnerability remediation.</p></li>
<li><p>
Leading and coordinating stakeholder meetings to review findings and remediation plans.</p></li>
</ul><p></p><p><b>
What we&rsquo;re looking for</b></p><ul>
<li><p>
Hold a B.S. or M.S. in Computer Science, Information Security, Engineering or related fields.</p></li>
<li><p>
Have experience working with CI/CD pipelines, containerized environments, and building, testing, and deployment in an IL4 environment.</p></li>
<li><p>
Demonstrate understanding of FedRAMP CVE guidelines, remediation timelines, and vulnerability frameworks such as CVE and CVSS.</p></li>
<li><p>
Bring 5+ years of experience in Information Security, including 4+ years in Vulnerability Management, and 5+ years in DevOps.</p></li>
<li><p>
Able to perform vulnerability scanning using tools such as Tenable Nessus, Prisma Cloud, Burp Suite, and similar platforms (e.g., Qualys, Tenable).</p></li>
<li><p>
Demonstrate proficiency in scripting (Python, Bash, PowerShell, or similar) to automate remediation and reporting tasks.</p></li>
<li><p>
Able to apply experience in Infrastructure Security, including OS hardening, and good knowledge of network technologies and protocols.</p></li>
<li><p>
Utilize experience in application, network, and system security, including intrusion analysis, malware, antivirus, host-based and network forensics, and tools such as JIRA, Confluence, and ServiceNow.</p></li>
</ul><p></p><p><b>
Salary Range or On Target Earnings:</b></p><p></p><p>
Minimum:</p>
$124 000,00<p></p><p>
Maximum:</p>
$271 200,00<p></p><p>
In addition to the base salary and/or OTE listed Zoom has a Total Direct Compensation philosophy that takes into consideration; base salary, bonus and equity value.</p><p></p><p>
Note: Starting pay will be based on a number of factors and commensurate with qualifications &amp; experience.</p><p></p><p>
We also have a location based compensation structure; there may be a different range for candidates in this and other locations</p><p>
At Zoom, we offer a window of at least 5 days for you to apply because we believe in giving you every opportunity. Below is the potential closing date, just in case you want to mark it on your calendar. We look forward to receiving your application!</p><p></p><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><p>
Anticipated Position Close Date:</p></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>
03/27/26<p></p><p><b>
Ways of Working</b><br>
Our structured hybrid approach is centered around our offices and remote work environments. The work style of each role, Hybrid, Remote, or In-Person is indicated in the job description/posting.</p><p></p><p><b>
Benefits</b><br>
As part of our award-winning workplace culture and commitment to delivering happiness, our benefits program offers a variety of perks, benefits, and options to help employees maintain their physical, mental, emotional, and financial health; support work-life balance; and contribute to their community in meaningful ways.</p><p></p><p><b>
About Us</b><br>
Zoomies help people stay connected so they can get more done together. We set out to build the best collaboration platform for the enterprise, and today help people communicate better with products like Zoom Contact Center, Zoom Phone, Zoom Events, Zoom Apps, Zoom Rooms, and Zoom Webinars.<br>
We&rsquo;re problem-solvers, working at a fast pace to design solutions with our customers and users in mind. Find room to grow with opportunities to stretch your skills and advance your career in a collaborative, growth-focused environment.</p><p><b><br>
Our Commitment
</b></p><p>At Zoom, we believe great work happens when people feel supported and empowered. We&rsquo;re committed to fair hiring practices that ensure every candidate is evaluated based on skills, experience, and potential. If you require an accommodation during the hiring process, let us know&mdash;we&rsquo;re here to support you at every step.</p><p><br>
If you need assistance navigating the interview process due to a medical disability, please submit an Accommodations Request Form and someone from our team will reach out soon. This form is solely for applicants who require an accommodation due to a qualifying medical disability. Non-accommodation-related requests, such as application follow-ups or technical issues, will not be addressed.</p><p></p>
#LI-Remote</div>

Senior Security Vulnerability Management Engineer

DeepSource Technologies

<div><p><b>Role Overview:</b></p><p>
The Senior Cybersecurity Engineer &ndash; Vulnerability Management is a vital role focusing on identifying, assessing, and mitigating vulnerabilities across the organization&rsquo;s IT environment. This position entails working closely with cross-functional teams to develop and implement vulnerability management programs aimed at enhancing the security posture of the organization. You will leverage various tools and methodologies to conduct vulnerability assessments, penetration testing, and coordinate remediation efforts effectively. This role is specifically targeted at Saudi Nationals to support local workforce development.</p><p><b>
Key Responsibilities:</b></p><ul>
<li>Conduct routine vulnerability assessments using automated tools and manual techniques to identify security weaknesses.</li>
<li>Develop and maintain vulnerability management policies, processes, and frameworks.</li>
<li>Collaborate with IT and development teams to prioritize and remediate vulnerabilities based on risk assessments.</li>
<li>Perform penetration testing to simulate real-world attack scenarios and identify potential security gaps.</li>
<li>Communicate findings and recommendations to technical and non-technical stakeholders effectively.</li>
<li>Stay informed of the latest threats, trends, and tools in vulnerability management and cybersecurity.</li><br>
</ul><br>
<br>
<b>Requirements</b><p><b><br>
Qualifications and Requirements:</b></p><ul>
<li>Bachelor's degree in Cybersecurity, Computer Science, or a related field.</li>
<li>Minimum of 7 years of experience in cybersecurity, focusing on vulnerability management.</li>
<li>Proficient in using tools such as Nessus, Qualys, or similar vulnerability scanning tools.</li>
<li>Experience with common vulnerabilities and attack vectors defined by OWASP and MITRE ATT&amp;CK frameworks.</li>
<li>Industry certifications such as CEH, CISSP, or CISM are highly desirable.</li>
<li>Strong analytical skills with the ability to work independently and in a team environment.</li><br>
</ul><br>
<br>
<b>Benefits</b><p><br>
o Medical insurance including family.</p><p>
o Flight tickets including family.</p></div>

Senior Cybersecurity Engineer VM - Saudi National- Jeddah, KSA

Booz Allen Hamilton

<div>Cyber Security Engineer<p><b>
The Opportunity:</b></p><p>
Are you looking for an opportunity to share your experience in hands-on systems engineering and vulnerability mitigation to safeguard our nation&rsquo;s critical infrastructure? As a Senior Systems Security and Network Security Engineer (ISSE), you will go beyond the paperwork to identify the technical solutions needed to assess vulnerabilities and implement real-world security strategies. We need your experience to oversee the development of security solutions that will harden our cloud environments and protect our military's critical data.</p><p></p><p>
On our team, you&rsquo;ll lead technical efforts to troubleshoot and analyze complex challenges using your deep knowledge of Linux and Windows systems administration. You won&rsquo;t just document deficiencies, you will partner directly with DevOps leads to remedy them. Using your expertise in cloud security and infrastructure controls, you&rsquo;ll assess emerging threats and implement the mitigations necessary to keep our systems resilient.</p><p></p><p>
In this role, you&rsquo;ll directly impact national security operations by bridging the gap between compliance and engineering. With mentoring, challenging hands-on problem-solving, and a focus on proactive defense, we grow as a team to stay ahead of the adversary.</p><p></p><p>
Work with us as we secure and protect department-wide cloud infrastructure for the better.</p><p></p><p><b>
What You&rsquo;ll Work On:</b></p><ul><li><p>
Identify technical system deficiencies and work directly with the DevOps team to implement remedies rather than just documenting risks.</p></li><li><p>
Leverage Windows and Linux systems administration background to log into servers, triage issues, and ensure security tools are functioning optimally.</p></li><li><p>
Analyze incoming vulnerability reports with a high level of infrastructure awareness to determine and execute the most appropriate technical mitigations.</p></li><li><p>
Work alongside cyber threat and hunt teams to identify and deploy secure solutions specifically designed for cloud-based environments.</p></li><li><p>
Build relationships with cross-functional teams, translating complex security requirements into actionable engineering tasks for senior management and DevOps leads.</p></li><li><p>
Capture and consolidate all technical documentation required for ISSM security reviews, ensuring that security remains an integrated part of the development lifecycle.</p></li></ul><p></p><p>
Join us. The world can&rsquo;t wait.</p><p></p><p><b>
You Have:</b></p><ul><li><p>
5+ years of experience as an ISSE or Security Engineer in a technical role, including determining secure solutions and mitigations</p></li><li><p>
5+ years of experience with Windows or Linux Systems Administration, including logging into servers, navigating file systems, and triaging system-level issues independently</p></li><li><p>
5+ years of experience in Vulnerability Management</p></li><li><p>
5+ years of experience implementing and managing information security tools such as scanners, endpoint protection, and SIEMs to identify advanced threats or indicators of compromise</p></li><li><p>
5+ years of experience collaborating with DevOps leads to proactively remedy system deficiencies and ensure that security controls are integrated into the engineering lifecycle</p></li><li><p>
Knowledge of cyber threats and technical infrastructure to execute specific remedies for identified gaps</p></li><li><p>
Ability to translate technical findings into consolidated documentation for ISSM security reviews, ensuring all compliance requirements are met through technical accuracy</p></li><li><p>
TS/SCI clearance with a polygraph</p></li><li><p>
HS diploma or GED</p></li></ul><p></p><p><b>
Nice If You Have:</b></p><ul><li><p>
5+ years of experience working with Cloud Infrastructure, including AWS or Azure, and implementing security guardrails within a DevOps CI/CD pipeline</p></li><li><p>
Experience working with Cyber Threat or Hunt teams to leverage big data analytics for identifying sophisticated threats and indicators of compromise</p></li><li><p>
Ability to provide technical mentorship to junior engineers through problem-solving and the sharing of security best practices</p></li><li><p>
AWS Certified Security Specialty, CCSP, or Red Hat Certified System Administrator Certification</p></li></ul><p></p><p><b>
Clearance</b><b>:</b></p><p>
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance with polygraph is required.</p><p></p><p><b>
Compensation</b></p><p>
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.</p><p></p>
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.<p></p><p><b>
Identity Statement</b></p><p>
As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.</p><p></p><p><b>
Work Model</b><br>
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.</p><ul><li>
If this position is listed as remote or hybrid, you&rsquo;ll periodically work from a Booz Allen or client site facility.</li><li>
If this position is listed as onsite, you&rsquo;ll work with colleagues and clients in person, as needed for the specific role.</li></ul><p></p><p><b>
Commitment to Non-Discrimination</b></p><p>
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</p></div><p></p>

Cyber Security Engineer

Amazon.com

<div><h2 class="jobSectionHeader"><b>DESCRIPTION</b></h2><p>
At Amazon, Security is our highest priority. Our team builds products and services to continuously identify, track, and mitigate security risks in third-party software and open source libraries across AWS. We work with the latest technologies and encourage a lifelong learning model. We are never bored and always have interesting and challenging tasks to solve.
<br>
<br>
We're seeking an experienced Software Development Engineer to join our AWS Vulnerability Management team, responsible for building and maintaining critical security services that help protect AWS customers and infrastructure. Our team is at the forefront of cloud security, developing innovative solutions to identify and mitigate security risks before they can be exploited.
<br>
<br>
You'll be handling complex challenges related to scaling vulnerability management across AWS's ever-growing infrastructure. This role offers the opportunity to:<br>
<br>
1) Build next-generation vulnerability management systems that operate at cloud scale<br>
<br>
2) Design and implement machine learning-based vulnerability prediction and prioritization mechanisms
<br>
<br>
3) Work directly with AWS service teams to integrate security controls and vulnerability assessments<br>
<br>
4) Collaborate with world-class security engineers and researchers to stay ahead of emerging threats<br>
<br>
5) Participate in the full software development lifecycle, from design through deployment and maintenance<br>
<br>
We are open to hiring candidates to work out of one of the following locations:<br>
<br>
Austin, TX USA<br>
<br>
Key job responsibilities<br>
Designing and building services that scale for millions of users and systems.
<br>
<br>
Driving new innovation in the Amazon/AWS ecosystem and &quot;Think Big!&quot;
<br>
<br>
Continually learn different technologies and architectures to ensure we have the correct solutions Java, Python, Big Data, Microservices etc.<br>
<br>
Solving complex problems with elegant solutions by working across teams and organizations in Amazon.<br>
<br>
Own your solutions and the entire life-cycle, from the roadmap to the architecture to implementation and continuous iterative development.<br>
<br>
A day in the life<br>
During a regular day engineers within our team work across multiple organizations and multiple technologies to ensure that AWS maintains the correct security posture. We partner with the compliance and application security teams to identify and work through any potentially impactful issues. We also define and maintain highly scalable solutions built on AWS Services to improve the visibility and tracking of security exposures worldwide.
<br>
<br>
We have a mix of both new and tenured engineers that all bring a unique aspect with them to any challenge. The team is made up of Software Development Engineers, Security Engineers, and System Development Engineers all working together to ensure our solutions meet/exceed the needs of our customers and are scalable.
<br>
<br>
About the team<br>
Diverse Experiences<br>
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying.<br>
<br>
Why Amazon Security?<br>
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon&rsquo;s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.<br>
<br>
Inclusive Team Culture<br>
In Amazon Security, it&rsquo;s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.<br>
<br>
Training &amp; Career Growth<br>
We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.<br>
<br>
Work/Life Balance<br>
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve.</p><h2 class="jobSectionHeader"><b>
BASIC QUALIFICATIONS</b></h2><ul><li>3+ years of non-internship professional software development experience</li><li>2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience</li><li>Experience programming with at least one software programming language</li></ul><h2 class="jobSectionHeader"><b>
PREFERRED QUALIFICATIONS</b></h2><ul><li>3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience</li></ul><br>
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.<br>
<br>
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner.<p><br>
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life &amp; AD&amp;D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.</p><br>
USA, TX, Austin - 143,700.00 - 194,400.00 USD annually</div><p></p>

Software Development Engineer, AWS Vulnerability Management (AVM)

Xbow

<div><h2 class="jobSectionHeader"><b>About XBOW</b></h2><p>
At XBOW, we&rsquo;re redefining the future of cybersecurity by building the world's first autonomous pentester, powered by AI. Today, the gold standard for securing software systems is human pentesters, but with the rise of artificial intelligence, we&rsquo;re stepping up to scale offensive security to meet the ever-growing demand.</p><p>
AI is transforming the landscape of both cybersecurity and cyberattacks. While millions of people without security expertise are creating software, bad actors are using AI to launch more effective attacks. XBOW fights back with AI-driven superpowers, enabling security teams to stay one step ahead.</p><p>
Backed by Sequoia Capital and Altimeter, and a team that includes the creators of GitHub Copilot and GitHub Advanced Security, XBOW is not just keeping up with the times&mdash;we&rsquo;re shaping the future of cybersecurity. Our mission is simple: to defeat the bad actors before they strike, using AI to revolutionize how we approach offensive security.</p><p>
We&rsquo;re building something that must be built, and we&rsquo;re the team to do it. Join us in shaping the next frontier of autonomous security.</p><p></p><h2 class="jobSectionHeader"><b>
Your Role</b></h2><p>
We're looking for an experienced, hands-on Security Engineer to secure XBOW's product, cloud, and platform as we scale. This is a technical individual contributor role focused on building security into how we design, ship, and operate systems.</p><p>
You'll work closely with engineering and platform teams across application security, cloud security, vulnerability management, and incident response. The core of this role is security engineering ownership: improving preventive controls, detection quality, and response readiness, while driving remediation of real risks in production.</p><p></p><h2 class="jobSectionHeader"><b>
What You&rsquo;ll Do</b></h2><ul><li><p>
Design and implement security controls across cloud, infrastructure, and internal platforms</p></li><li><p>
Partner with engineering to harden cloud architecture, IAM, and infrastructure</p></li><li><p>
Own product security reviews for new features, services, and major architecture changes</p></li><li><p>
Drive threat modeling and secure design decisions early in the SDLC</p></li><li><p>
Operate and improve AppSec workflows (SAST, SCA, secrets scanning, IaC scanning)</p></li><li><p>
Triage vulnerabilities across application, container, and cloud findings, and drive remediation with risk-based SLAs</p></li><li><p>
Define and run the vulnerability management lifecycle: intake, prioritization, exception handling, validation, and reporting</p></li><li><p>
Improve CNAPP coverage and finding quality across cloud accounts and workloads</p></li><li><p>
Improve Kubernetes and container security posture</p></li><li><p>
Monitor, investigate, and respond to security events and incidents</p></li><li><p>
Build automation to improve security operations, access workflows, and incident response</p></li><li><p>
Support the compliance function by implementing and maintaining technical controls for SOC 2 and ISO 27001, and by documenting security processes, playbooks, and policies that scale with the company.</p></li><li><p>
Support the IT team with timezone coverage for core operational security tasks, including SaaS administration (Okta, Google Workspace, 1Password), onboarding/offboarding workflows, and endpoint access management (MDM, VPN, and secure device provisioning) for a fully remote team.</p></li></ul><p></p><h2 class="jobSectionHeader"><b>
Who You Are</b></h2><ul><li><p>
5+ years of experience in security engineering, product security, cloud/platform security, or closely related roles</p></li><li><p>
Strong hands-on experience securing cloud environments (AWS and Azure)</p></li><li><p>
Comfortable owning technical security problems end-to-end in fast-moving environments</p></li><li><p>
Hands-on experience with product/application security in engineering environments (secure design reviews, threat modeling, code-level risk discussions)</p></li><li><p>
Experience operating AppSec tooling and processes at scale (SAST, SCA, secrets, IaC scanning)</p></li><li><p>
Strong vulnerability triage and remediation management experience, including risk-based prioritization and SLAs</p></li><li><p>
Experience with CNAPP (or equivalent cloud security platforms) and tuning findings for engineering actionability</p></li><li><p>
Working knowledge of Kubernetes/container security in production systems</p></li><li><p>
Ability to partner with developers and platform teams to ship secure defaults without blocking delivery</p></li><li><p>
Comfortable writing scripts and automations to improve security reliability and scale</p></li><li><p>
Experience in incident response, investigation, and post-incident hardening in cloud-native environments</p></li><li><p>
Familiar with SOC 2 requirements and comfortable implementing technical controls to support compliance</p></li><li><p>
Security-minded, detail-oriented, and a proactive communicator in remote-first teams</p></li></ul><p></p><h2 class="jobSectionHeader"><b>
Bonus if you have</b></h2><ul><li><p>
Multi-cloud experience beyond AWS (e.g., Azure/GCP/OCI)</p></li><li><p>
Offensive security/pentesting background and ability to convert findings into durable engineering fixes</p></li><li><p>
Experience scaling security at a startup from early stage to audit-ready maturity</p></li><li><p>
Relevant security certifications (e.g., OSCP, OSCE, AWS Security Specialty, Kubernetes security certs)</p></li><li><p>
Proficient with identity and access systems (Okta, Google Workspace, cloud IAM) and access lifecycle management</p></li></ul><p></p><h2 class="jobSectionHeader"><b>
What We Offer:</b></h2><ul><li><p><b>
Compensation &amp; Equity</b>: Competitive salary, clear performance-based incentives, and equity package, making you an integral part of XBOW&rsquo;s growth story.</p></li><li><p><b>
Career Growth</b>: Significant opportunities to progress within the sales organization and shape your career trajectory as we scale.</p></li><li><p><b>
Meaningful Work</b>: You&rsquo;ll directly impact XBOW&rsquo;s mission to revolutionize cybersecurity and protect organizations worldwide.</p></li></ul><p></p><h2 class="jobSectionHeader"><b>
What Else You Should Know</b></h2><ul><li><p><b>
Location</b>: Remote US</p></li><li><p><b>
Contract</b>: Full-time</p></li><li><p><b>
Hiring Process</b>:</p><ul><li><p>
Introduction with Talent</p></li><li><p>
Hiring Manager Interview</p></li><li><p>
Technical Interview</p></li><li><p>
Final Interview with Head of Department</p></li></ul></li></ul><p>
At XBOW, we leverage AI every day, it's embedded in our product and our sales approach. But for this role, we&rsquo;re seeking someone who brings genuine curiosity, empathy, and persistence. If that's you, we'd love to connect.</p><p>
Compensation Range: $140K - $180K</p></div>

Security Engineer

Amentum

<div><p>In support of a challenging, critical, and rewarding program that provides integrated voice, video, and data services throughout the Information Technology lifecycle, Amentum is seeking Senior Information System Security Engineer (ISSE) to serve as a subject matter expert in the design, implementation, and optimization of enterprise security toolsets. The successful candidate will lead the engineering efforts for the Trellix (ePO) ecosystem and the ACAS (Nessus) suite, ensuring mission-critical assets remain secure, compliant, and resilient. This role requires a blend of high-level security architecture, hands-on troubleshooting, and the ability to drive secure-by-design principles across the System Development Life Cycle (SDLC). You must be a critical thinker, have a strong work ethic, and be able to work independently or as a member of a team in a dynamic environment. We value candidates who are detail-oriented while also being able to think and react quickly to emerging and unique problem sets. To be successful, you must be able to rapidly adapt and learn how to operate the front and back end of new products and processes.</p><p></p><p><b>
Work Schedule:
</b></p><ul><li>5 Days (Mon &ndash; Fri); 8 hrs/Day; 40 hrs/wkly</li></ul><p></p><p><b>
Essential Responsibilities:
</b></p><p>The duties and responsibilities of the Senior Information Systems Security Engineer include, but are not limited to the following:</p><ul><li>
Endpoint Security Engineering (Trellix/ePO)<ul>
<li>Ecosystem Management: Expertly design, configure, and maintain Trellix components (ePO, Trellix Agent, DLP, HIPS, Policy Auditor, ABM, and VSE) across Windows and Linux environments.</li>
<li>Policy Development: Author and deploy endpoint security policies for ENS modules (Threat Prevention, Firewall, Web Control) based on DISA STIGs and organizational needs.</li>
<li>Threat Mitigation: Develop custom signatures, rules, and exceptions to address zero-day threats and specific operational requirements.</li>
<li>Operational Continuity: Validate custom exceptions to ensure uninterrupted operation of mission-critical processes without compromising compliance.</li>
</ul></li><li>Vulnerability Management (ACAS/Nessus)<ul>
<li>Architecture &amp; Strategy: Design enterprise-wide vulnerability scanning strategies and manage the deployment of Security Centers and Nessus scanners.</li>
<li>Advanced Troubleshooting: Serve as the final escalation point for complex scan issues, credentialing problems, and system communication failures.</li>
<li>Risk Reporting: Configure automated reporting of compliance data to continuous monitoring systems and risk-scoring repositories.</li>
</ul></li><li>Security Integration &amp; Engineering<ul>
<li>Tool Orchestration: Integrate Trellix and ACAS with tools such as Splunk, XSOAR, and ServiceNow to automate workflows and enhance incident response.</li>
<li>RMF Support: Provide authoritative recommendations and ACAS-generated artifacts to support the Assessment and Authorization (A&amp;A) process and RMF packages for Authority to Operate (ATO).</li>
<li>Strategic Oversight: Lead the maintenance and scalability of test, development, and operational environments, collaborating with Network and DevSecOps teams to enhance resilience.</li>
<li>Multi-Tier Support: Deliver Tier 1&ndash;3 maintenance and incident response for the full cybersecurity portfolio (ACAS, Trellix, Splunk, XSOAR).</li>
<li>Compliance Mastery: Deep understanding of DISA STIGs, NIST 800-53, and the Risk Management Framework (RMF).</li>
</ul>
</li></ul><p></p><p><b>Minimum Requirements:</b></p><ul>
<li>
Must have active Top-Secret clearance with SCI or TS with the ability to acquire SCI</li>
<li>Knowledge and experience with NESSUS/ACAS and Trellix administration</li>
<li>Experience in Splunk role while working in a Splunk Clustered Environment</li>
<li>Must be able to work a 40-hour work week, normally Monday through Friday.</li>
<li>Ability to work overtime during critical peaks and be available to meet last-minute requests for overtime if needed.</li>
<li>Ability to travel (5-10%) primarily within 75 miles.</li>
<li>Familiarity with MS Office applications such as Excel, Word, Outlook, SharePoint, Project, and Visio.</li>
<li>Exceptional attention to detail; excellent verbal and written communication skills; strong critical thinking, organizational, time-management, and problem-solving skills.</li>
<li>Ability to work both independently and as part of a team in a dynamic environment.</li>
</ul><p></p><p><b>
Clearance Required:
</b></p><ul><li>Must have active Top-Secret clearance with SCI or TS with the ability to acquire SCI</li></ul><p></p><p><b>
Minimum Education:
</b></p><ul><li>Bachelor&rsquo;s Degree in a related field (Cyber and/or Engineering)</li></ul><p></p><p><b>
Minimum Years of Experience:
</b></p><ul><li>8 years of relevant experience</li></ul><p></p><p><b>
Required Certifications:
</b></p><ul><li>Must possess, or be able to obtain, one of the following 8140 IAT Level II or III baseline certifications before a start date:<ul>
<li>Level II certifications include &ndash; CCNA Security, GISCP, GSEC, Security+ CE, SSCP</li>
<li>Level III certifications include &ndash; CASP CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH</li>
</ul>
</li></ul><p></p><p><b>Preferred Qualifications:</b></p><ul>
<li>
<b>RHEL Administration: </b>Proficient understanding of Red Hat Enterprise Linux (RHEL) 8 and 9, including the ability to monitor and maintain cybersecurity tools at the OS level.</li>
<li><b>SOAR Automation: </b>Experience managing the full lifecycle of XSOAR infrastructure, including building complex playbooks, custom scripts, and integrations to automate cyber workflows.</li>
<li><b>Splunk O&amp;M: </b>Proficiency in Splunk Operations &amp; Maintenance, including managing distributed components, index management, version upgrades, and creating custom dashboards via the Monitoring Console.</li>
</ul><p></p><p>
#javelin</p><p><br>
</p><p><b>Compensation Details:</b></p>
185000<p><br>
</p><p>The compensation range or hourly rate listed for this position is provided as a good-faith estimate of what the company intends to offer for this role at the time this posting was issued. Actual compensation may vary based on factors such as job responsibilities, education, experience, skills, internal equity, market data, applicable collective bargaining agreements, and relevant laws.</p><p></p><p><b><br>
Benefits Overview:</b></p><p>
Our health and welfare benefits are designed to support you and your priorities. Offerings include:</p><ul>
<li><p>
Health, dental, and vision insurance</p></li>
<li><p>
Paid time off and holidays</p></li>
<li><p>
Retirement benefits (including 401(k) matching)</p></li>
<li><p>
Educational reimbursement</p></li>
<li><p>
Parental leave</p></li>
<li><p>
Employee stock purchase plan</p></li>
<li><p>
Tax-saving options</p></li>
<li><p>
Disability and life insurance</p></li>
<li><p>
Pet insurance</p></li></ul><p></p><p><i><br>
Note: Benefits may vary based on employment type, location, and applicable agreements. Positions governed by a Collective Bargaining Agreement (CBA), the McNamara-O'Hara Service Contract Act (SCA), or other employment contracts may include different provisions/benefits.</i></p><p><br>
</p><p><b>Original Posting:</b></p>
03/19/2026 - Until Filled<p>
Amentum anticipates this job requisition will remain open for at least three days, with a closing date no earlier than three days after the original posting. This timeline may change based on business needs.</p><p><br>
</p><p>Amentum is proud to be an Equal Opportunity Employer. Our hiring practices provide equal opportunity for employment without regard to race, sex, sexual orientation, pregnancy (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth, or breastfeeding), age, ancestry, United States military or veteran status, color, religion, creed, marital or domestic partner status, medical condition, genetic information, national origin, citizenship status, low-income status, or mental or physical disability so long as the essential functions of the job can be performed with or without reasonable accommodation, or any other protected category under federal, state, or local law. Learn more about your rights under Federal laws and supplemental language at Labor Laws Posters.</p></div>

Information System Security Engineer - Senior

Search 10000+ Vulnerability management engineer jobs near you this March. New roles added regularly across leading industries. Apply today.