Information Security Engineer (Vulnerability and Management)

Roles & Responsibilities

Responsibilities:

• Self-starter with the flexibility to work remotely and support a global team, with the ability to track and lead multiple activities concurrently while maintaining a thorough focus on protecting customer data.
• Extensive experience in vulnerability management, including hands-on expertise with vulnerability scanning tools such as Tenable and Qualys, excellent knowledge of common security vulnerabilities, and the ability to assess their severity, business impact, and remediation requirements.
• Proven ability to independently analyze, communicate, support, and drive remediation of identified vulnerabilities, conduct proof-of-concept testing for known vulnerabilities, and continuously improve processes through automation and innovation.
• Good technical understanding of networking and security, including IPv4 and IPv6 networks, penetration testing methodologies, Linux administration, SQL, and engagement with the broader security research community.
• Excellent analytical and problem-solving skills, with demonstrated critical thinking abilities and experience solving complex logic and algorithmic challenges in support of enterprise security objectives.

Technical Skills

• Familiar with one or more of the following programming : Python, Go, Rust, and/or Bash scripting
• Working knowledge of container technologies (Docker, Kubernetes) and container image/registry vulnerability scanning(e.g. Twistlock/Prisma Cloud, Trivy)
• Working knowledge of cloud platforms (AWS, GCP, and/or Azure) and cloud security concepts (IAM, networksecurity groups, workload/posture management)
• DevSecOps experience or knowledge is good to have — integrating security scanning and gates into CI/CD pipelines,Infrastructure as Code (e.g. Terraform) security review, shift-left remediation practices.

AI & Automation

• Awareness of and interest in AI-driven security operations trends; hands-on experience with LLM tooling is a highly advantageus.
• Familiarity with the Model Context Protocol (MCP) and experience building or integrating MCP servers/tools
• Exposure to designing or developing AI agents (e.g. agentic workflows for vulnerability triage, enrichment, orremediation tracking) is a plus

EDUCATION & EXPERIENCE

• BS in Computer Science, Information Technology, Information Security, or related field
• 3 years experience in information security or related field
• Experience with container/cloud security and DevSecOps practices, and/or exposure to AI agent or MCP tooling, is aplus

Tell employers what skills you have

Data Protection
Communication
Provides Support
Security Reconciliations
Continuous Process Improvement
SQL
Penetration Testing
Linux Administration
Technical Ability
Independent Analysis
Enterprise Security Solutions
Activity Coordination
Network Security
Security Research
Threat and Vulnerability Management
IPv6