Infrastructure Vulnerability Engineer

Role: Infrastructure Vulnerability Engineer

Location: Dallas TX 75244 (Hybrid)

Type: Contract

Scope:

• Core responsibilities to include assessing and promoting remediation for all the assets that reside in all the regions and data centers across the globe.
• Candidate will be a key member of the centralized information security team.

What you'll do:

• Run authenticated and agent-based vulnerability scans across on-prem, cloud, and container environments, and report findings.
• Publish vulnerability status reports and dashboards to senior management and track remediation against defined SLAs.
• Define and participate in implementation of On-prem and Cloud architecture and security controls.
• Proactively identify emerging threats and actively exploited vulnerabilities, and prioritize remediation using risk context (CVSS, EPSS, CISA KEV, asset criticality).
• Partner with infrastructure, cloud, and application teams to drive remediation, validate fixes, and manage risk exceptions.
• Maintain security by monitoring and ensuring compliance to standards, policies, and procedures; conducting incident response analyses; developing and conducting training programs.
• Identify gaps in scan coverage and asset inventory, and recommend tooling and process improvements, including automation.
• Participate in and assist with incident response team, as appropriate.
• Generate metrics (e.g., mean time to remediate, SLA compliance, risk trends) for management as needed.
• Prepare system security reports by collecting, analyzing, and summarizing data and trends.

What we are looking for:

• 3 5 years of experience in information security, vulnerability management, or penetration testing; a relevant master's degree may substitute for up to two years of experience.
• Experience in vulnerability and threat management, including gathering and condensing threat intelligence into actionable and meaningful communication materials.
• Bachelor's degree in information security, information technology, computer science, or a related STEM field, or equivalent practical experience.
• Working knowledge of network security architecture, segmentation, and secure configuration.
• Solid understanding of network, system, and endpoint security.
• Experience with public cloud platforms (AWS, Microsoft Azure, Google Cloud) and cloud security tooling such as CSPM/CNAPP (e.g., Wiz, Prisma Cloud, Microsoft Defender for Cloud).
• Familiarity with security frameworks and regulatory requirements such as NIST CSF 2.0, CIS Controls, ISO 27001/27002, and SOC 2 (SSAE 18).
• Hands-on experience with modern vulnerability management platforms
• Practical experience with the development, implementation, and management of security related technologies (e.g., SIEM, EDR, WAF, next-generation firewalls, internet-facing services).
• Excellent customer service including strong written and oral communication skills.
• Familiarity with container and Kubernetes security, infrastructure as code (e.g., Terraform), and scripting (Python or PowerShell) to automate scanning, ticketing, and reporting.
• Demonstrated understanding of information security concepts, standards, practices, including but not limited to firewalls, intrusion prevention and detection, TCP/IP and related protocols, device monitoring and log management and event monitoring/reporting.
• Certifications such as CompTIA Security+ or CySA+, GIAC (e.g., GCIH, GPEN), OSCP, or a cloud security certification (e.g., AWS Certified Security Specialty, Microsoft AZ-500) are a plus.
• Results-focused, with strong attention to detail.
• Ability to work a second shift that overlaps with customer hours.