Cybersecurity Engineer

Job Description

• Triage newly disclosed vulnerabilities and determine their relevance and potential impact to enterprise applications and assets.
• Assess vulnerability exploitability using threat intelligence, exploit and proof-of-concept information, and likely attack paths.
• Clearly document potential exposure, impact, and risk.
• Assign firm-aligned severity and risk ratings mapped to recognized industry standards, including Common Vulnerabilities and Exposures (CVE), Common Platform Enumeration (CPE), and Common Vulnerability Scoring System (CVSS), with clear supporting rationale.
• Maintain high-quality, audit-ready case notes and supporting documentation.
• Support follow-the-sun business-as-usual vulnerability management operations and urgent escalations.
• Prioritize multiple vulnerabilities and operational activities based on risk and urgency.

Qualifications

• Strong, hands-on experience with vulnerability triage and risk assessment across the end-to-end vulnerability management lifecycle.
• Strong working knowledge of CVE, CPE, and CVSS.
• Demonstrated ability to interpret vulnerability disclosures, security advisories, threat intelligence, and exploit information to assess real-world risk.
• Strong technical writing and communication skills, with the ability to clearly document impact, recommended actions, priorities, and risk rationale.
• Broad familiarity with enterprise technology platforms and associated patch and release lifecycle considerations.
• Experience working with cloud environments and large-scale open-source technology usage within enterprise environments.
• Strong prioritization and multitasking skills with an operations-focused mindset.

Tools and Technologies

• CVE, CPE, and CVSS vulnerability standards
• Vulnerability management and risk assessment processes
• Threat intelligence and exploit/proof-of-concept analysis
• Microsoft technologies
• VMware
• Oracle and Java
• Citrix
• F5
• Cloud environments
• Enterprise open-source technologies