Full Stack Engineer With Vulnerability Management

Job Title: Full stack engineer with Vulnerability Management

Location: Charlotte, NC

Full Time

Job Description

Must Have Technical/Functional Skills

Full stack developer with experience in following areas, Java, Spring Boot, Maven, Node.js, NPM, React, CI/CD, JUNIT, Tosca, Litmus

Strong experience in Vulnerability Management and enterprise remediation programs.

Expertise in Cybersecurity Governance, Risk Management, and Compliance.

Experience coordinating vulnerability remediation across:

Middleware Platforms, Server/Platform Infrastructure, Databases, Applications, Cloud and On-Prem Environments

Knowledge of enterprise vulnerability management tools such as Qualys, Tenable, Rapid7, ServiceNow Vulnerability Response.

Experience managing remediation activities for BI and Analytics platforms: Tableau, MicroStrategy, Cognos, Power BI, TIBCO, Starburst

Strong understanding of:

CVSS Scoring, Security Risk Ratings, Patch Management, Vulnerability Lifecycle Management, Risk Acceptance / Exception Processes

Experience with security governance reporting, audit support, and compliance requirements.

Strong stakeholder management and cross-functional coordination skills.

ServiceNow, Jira, Confluence

ITIL Processes (Incident, Change, Problem Management)

Enterprise Infrastructure & Platform Services

Vendor Management

Reporting & Dashboarding (Power BI, Excel)

Process Improvement and Automation Banking/Financial Services domain experience preferred

Roles & Responsibilities

Lead end-to-end execution of enterprise vulnerability remediation initiatives.

Coordinate remediation efforts across Infrastructure, Middleware, Database, Platform, Application, and Security teams.

Develop and maintain remediation plans, project schedules, milestones, dependencies, and deliverables.

Drive closure of security vulnerabilities within enterprise-defined SLAs.

Facilitate governance meetings, remediation reviews, risk discussions, and executive status updates.

Partner with Information Security, GIS, Infrastructure Services, Database Services, Middleware Services, Application Support teams, and external vendors.

Track and report:

Open vulnerabilities, Aging vulnerabilities, Compliance status, Risk exposure, Remediation progress

Escalate overdue remediation activities, resource constraints, and critical risks.

Ensure remediation activities meet audit, regulatory, and security compliance requirements.

Maintain remediation evidence and documentation for audits and compliance reviews.

Monitor vulnerability dashboards and ensure accuracy of governance metrics.

Drive continuous improvement initiatives around remediation processes, governance, reporting, and automation.

Act as the central point of contact between technology teams, security teams, leadership, and vendors.