Threat & Vulnerability Management Security Engineer I

The Threat & Vulnerability Management (TVM) Security Engineer I role supports the organization’s security goals by identifying, assessing, prioritizing, remediating, verifying, and managing vulnerabilities across enterprise environments.

Key Responsibilities

• Support the vulnerability management lifecycle, including vulnerability identification, validation, remediation tracking, verification, and reporting.
• Review and analyze vulnerability scan results to identify and help prioritize security risks.
• Assist with operating and maintaining vulnerability assessment tools to support accurate asset coverage and vulnerability visibility.
• Track remediation activities and follow up with technology teams to ensure vulnerabilities are addressed within established timelines.
• Research vulnerabilities, security advisories, threat intelligence, and industry best practices to improve understanding of emerging risks.
• Assist with vulnerability assessments across on-premises, cloud, and hybrid environments.
• Support asset inventory and ownership validation efforts to enhance vulnerability tracking and visibility.
• Develop and maintain security integrations, automation, and workflows to improve vulnerability management and risk visibility.
• Assist in building and maintaining dashboards, reports, and metrics for vulnerability management activities.
• Participate in vulnerability validation and verification activities to confirm successful remediation.
• Contribute to process improvement initiatives and automation efforts that enhance program efficiency and effectiveness.
• Partner with infrastructure, application, cloud, and other technology teams to support remediation efforts.
• Assist with documentation and tracking of vulnerability exceptions, compensating controls, and risk acceptance decisions.
• Support the development and maintenance of vulnerability management procedures, standards, and operational documentation.
• Help prepare reporting materials for operational reviews and security governance activities.
• Assist with audit and compliance activities by collecting and organizing supporting documentation and evidence.
• Monitor vulnerability disclosures, vendor security advisories, and emerging threats to identify potential organizational impacts.
• Escalate critical findings and remediation challenges to senior team members when appropriate.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Computer Engineering, Cybersecurity, or a related field, or equivalent relevant professional experience.
• 1 to 3 years of experience in cybersecurity, vulnerability management, security operations, or a related technical role.
• Solid understanding of vulnerability management concepts, remediation processes, and risk-based prioritization.
• Experience with or exposure to vulnerability management platforms such as Tenable, Qualys, Rapid7, or Microsoft Defender Vulnerability Management.
• Familiarity with security frameworks and standards including CVE, CVSS, and CISA Known Exploited Vulnerabilities (KEV).
• Working knowledge of Windows, Linux, networking, cloud platforms, and enterprise technology environments.
• Strong analytical, organizational, and communication skills, with the ability to collaborate across technical teams.
• Relevant certifications such as Security+, CySA+, or similar certifications are preferred.

Technology Stack

• Tenable
• Qualys
• Rapid7
• Microsoft Defender Vulnerability Management
• CVE
• CVSS
• CISA Known Exploited Vulnerabilities (KEV)
• Windows
• Linux

Location and Work Setting

Cleveland, OH (onsite)

Benefits

• Medical & Dental Plans
• Life Insurance, including eligible spouses & children
• Health Care Flexible Spending
• Dependent Care
• 401k Savings Plans
• Paid Time Off

Additional Offerings

• Competitive compensation package and career advancement opportunities.
• Commitment to a diverse and inclusive culture where employees’ ideas and perspectives are respected.
• Recognition of excellence supported by diverse backgrounds, skills, and perspectives.