Vulnerability Management Engineer - Mid-Atlantic (Remote in EST/CST)

Remote in Eastern or Central time zones

GuidePoint Security LLC

View company page

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.

As a Vulnerability Management Engineer, you will be part of a team of highly skilled engineers providing delivery services for customers in several verticals including retail, finance, healthcare, and more. Your primary responsibilities revolve around partnering with our customers to advise, develop, implement, and optimize all components of the vulnerability management lifecycle.

Note: This is a remote position but applicants must located in Eastern or Central time zones to be considered. 

Technical Skills & Knowledge Required:
- Experience with the entire vulnerability management lifecycle, assisting with building and maintaining vulnerability management programs in large and complex environments
- MUST have experience with Qualys VMDR and Qualys Policy Compliance
- Ability to deploy Qualys virtual scanning infrastructure on-premises and in the public cloud
- A strong understanding of configuring scan settings, setting up authenticated scans, deploying cloud agents, configuring queries, and producing reports
- An understanding of operating systems such as Windows Server, Windows 10/7, Mac OSX, RHEL, and Ubuntu Linux and the ability to perform basic functions at the CLI
- An understanding of networking concepts, protocols and detailed knowledge of how networks function
- A strong understanding of systems design and implementation
- An understanding of how and why vulnerabilities exist and are exploited
- Ability to understand and articulate complex vulnerability information to both technical and non-technical audience
- Ability to quantify true risk of vulnerability findings given environmental and extenuating circumstance
- Ability to interpret vulnerability scan results and build creative remediation strategies to remediate vulnerabilities
- Ability to design compensating controls when technical fixes may not be feasible
- Strong written and verbal communication skills
- A strong desire to learn new technologies and contribute to a fast-growing company

Other relevant experience:
- Experience with public cloud providers such as Amazon AWS, Microsoft Azure, or Google GCP
- Hands-on experience hardening systems to benchmarks such as CIS, NIST, etc.
- Experience with system administration tasks within Active Directory, Microsoft Office 365, and Email Security Solutions
- Bachelor's degree in Computer Science, Engineering, Information Systems / Security or related discipline preferred

We use Greenhouse Software as our applicant tracking system and communicate through their systems. At times, your email may block our communication with you. Please be sure to check your SPAM folder so that you don't miss updates on your application.

Why GuidePoint?

GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 750 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 3,000 Enterprise-Level customers.

Firmly-defined core values drive all aspects of the business, which have been paramount to the company’s success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity.  

This is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation.

Some added perks….

  • Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
  • 100% employer-paid medical premiums (employee only $0 deductible and HSA plans) along with 75% employer-paid family contributions
  • 100% employer-paid dental premiums (employee only) along with 75% employer-paid family contributions
  • 12 corporate holidays and a Flexible Time Off (FTO) program
  • Healthy mobile phone and home internet allowance
  • Eligibility for retirement plan after 2 months at open enrollment
  • Pet Care plan


* Salary range is an estimate based on our salary survey 💰

Tags: Active Directory AWS Azure Cloud Compliance Computer Science Finance GCP Linux NIST Qualys Ubuntu Vulnerabilities Vulnerability management Windows

Perks/benefits: Career development Flex hours Flex vacation Home office stipend

Region: Remote/Anywhere
Job stats:  22  3  0
  • Share this job via
  • or

More jobs like this

Explore more InfoSec/Cybersecurity career opportunities

Find open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Analysis, Cryptography, Digital Forensics and Cyber Security in general, filtered by job title or popular skill, toolset and products used.