4+
Experience
Remote
Job Type
B2+
English Level
Who We’re Looking For
Jaxel is seeking a highly skilled Vulnerability Management Engineer to support our client in strengthening their Vulnerability Management Program. This engineer will play a critical role in maintaining client’s compliance with Payment Card Industry Data Security Standard (PCI-DSS), and work closely with the Information Security team to mitigate vulnerabilities and protect the organization from emerging threats. The ideal candidate will have extensive experience with Rapid7 and Qualys vulnerability management systems.
What You’ll Do
-
Conduct regular vulnerability assessments and manage the full vulnerability lifecycle, from identification to remediation.
-
Collaborate with cross-functional teams to prioritize and remediate vulnerabilities, ensuring alignment with security policies.
-
Provide direct support for PCI-DSS compliance related to vulnerability management.
-
Develop, document, and maintain vulnerability management policies and procedures.
-
Analyze vulnerability data to identify trends, emerging threats, and areas for improvement.
-
Automate vulnerability assessment and reporting processes where possible, leveraging tools like Python and Excel.
-
Create detailed reports, dashboards, and actionable insights to inform the broader security strategy.
-
Participate in security incident response activities as required.
-
Stay up-to-date on the latest industry trends, threats, and vulnerability management best practices.
What You’ll Need
-
Bachelor’s degree in Computer Science, Information Security, or a related field.
-
3+ years of experience in vulnerability management, with hands-on expertise in Rapid7, Qualys, Nessus, and Wiz.
-
Strong understanding of PCI-DSS requirements for vulnerability management.
-
Proficiency in data analysis using tools like Excel, SQL, and data visualization platforms.
-
Excellent analytical, problem-solving, and communication skills.
-
Ability to handle sensitive information with confidentiality and integrity.
-
Relevant security certifications such as CISSP, CISM, or CEH are highly desirable.
What We Offer
- Competitive salary.
- Remote work opportunity.
- Comfortable work in your local time zone.
- Flexible work schedule.
- Professional growth and development.
- Multicultural working environment.
