VULNERABILITY MANAGEMENT ENGINEER

Paragon Cyber Solutions is a woman-, veteran-, and minority-owned cybersecurity and IT services firm that supports government and commercial clients with compliance, cyber defense, and mission-focused technology solutions. Our team takes pride in solving complex technical challenges and delivering innovative, customer-focused outcomes. The Vulnerability Management Engineer III is responsible for leading vulnerability identification, assessment, prioritization, remediation tracking, and reporting activities across enterprise environments. This role serves as a subject matter expert on vulnerability management platforms, security risk analysis, automation, and compliance reporting. This position is contingent upon contract award. • Administer and optimize enterprise vulnerability management platforms. • Conduct vulnerability scanning, assessment, and remediation tracking. • Analyze CVEs, CVSS scores, threat intelligence, and exploitability. • Develop remediation plans with system owners and infrastructure teams. • Automate vulnerability reporting, ticketing, and remediation workflows. • Produce executive-level dashboards and security metrics. • Support federal audits, security assessments, and compliance activities. • Develop standard operating procedures and platform documentation. • Improve asset inventory accuracy and vulnerability coverage. • Assist with patch management coordination and verification. Education • Bachelor's degree or equivalent experience. Experience • 5+ years of vulnerability management or security engineering experience. • Experience with process automation and reporting. • Splunk dashboard, reporting, and query development. • Experience generating scan evidence, mitigation documentation, and audit artifacts. • Experience supporting federal cybersecurity directives and data calls. • SOP development for vulnerability management programs. Experience with vulnerability assessment platforms such as: • Tenable • Qualys • Rapid7 Strong experience with: • Asset management • Patch management • Vulnerability remediation workflows Preferred Certifications (one or more): Must meet IAM Level II IAWF baseline certification standards under DoD 8140/8570.01-M, with at least one of the following: • CAP (Certified Authorization Professional) • CASP+ CE (CompTIA Advanced Security Practitioner) • CISM (Certified Information Security Manager) • CISSP (or Associate) • GSLC (GIAC Security Leadership Certification) • CCISO (Certified Chief Information Security Officer) • HCISPP (HealthCare Information Security and Privacy Practitioner) • Health Care Plan (Medical, Dental & Vision). • Retirement Plan (401K w/ employer matching). • Paid Time Off & Paid Federal Holidays. • Short and Long-Term Disability. • Healthy Work-Life Balance.