Vulnerability Management Engineer

Title: Vulnerability Management Engineer
Location: Oxon Hill, Maryland (Remote)

Job Description:

Job#: 3047690

Duration: 6+ month contract-to-hire

Clearance: Must be eligible to obtain/maintain a Public Trust

Role Overview

We are seeking a Vulnerability Management Engineer to identify, prioritize, track, and validate the remediation of security vulnerabilities. This role involves using Qualys to support a large-scale system migration from Tenable. The ideal candidate will work with a senior resource to manage remediation work plans, coordinate with various teams, and ensure all activities are properly documented. Strong communication skills are essential for this position.

Key Responsibilities

• Utilize Qualys to identify, prioritize, track, and validate remediation of security vulnerabilities.
• Monitor and manage Remediation Work Plans (RWPs) across the enterprise environment.
• Coordinate remediation efforts with system owners, cybersecurity teams, and enterprise administrators.
• Validate the closure of vulnerabilities and ensure remediation activities are documented in a detailed, audit-ready manner.
• Provide daily technical remediation support services.
• Analyze vulnerability findings for risk, accuracy, and remediation prioritization.
• Generate vulnerability reduction reports, trend analysis reports, and dashboards for leadership.
• Support internal and external audit events.

Required Qualifications

Education and Experience:

• Bachelor’s degree and 6+ years of applicable experience, OR
• Associate’s degree and 8+ years of applicable experience, OR
• Master’s degree and 4+ years of applicable experience, OR
• 12+ years of applicable experience in lieu of a degree.

Skills and Clearances:

• U.S. Citizenship is required.
• Must be able to obtain and maintain a public trust suitability.
• Demonstrated experience with Qualys is mandatory.
• Experience with vulnerability assessment methodologies and risk analysis.
• Strong analytical skills for vulnerability prioritization and trend analysis.
• Must be located in the Washington D.C. metropolitan area for occasional onsite meetings.

Preferred Qualifications

• Previous experience with federal government agencies.
• Experience with other vulnerability scanning tools such as dbProtect, WebInspect, or Tenable.
• Knowledge of security compliance frameworks.
• Experience with reporting and dashboard tools such as Tableau, Power BI, or Splunk.

Everforth Apex Benefits Overview: Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our ‘Welcome Packet’ as well, which an Everforth Apex team member can provide.