Vulnerability Engineer

Everforth ECS is seeking an experienced Vulnerability Engineer to join an enterprise-scale cybersecurity program supporting a major federal civilian agency. This position supports remote work, with preference given to candidates residing in or near the National Capital Region (NCR). 

In this role, you will engineer, implement, integrate, and optimize enterprise vulnerability management capabilities across complex on-premises, cloud, and hybrid environments. You will collaborate with cybersecurity architects, security engineers, system administrators, vulnerability analysts, and government stakeholders to improve vulnerability discovery, strengthen assessment coverage, automate security processes, and support effective remediation of exploitable weaknesses. Your technical expertise will help modernize vulnerability management operations, improve enterprise security visibility, and reduce cybersecurity risks affecting mission-critical federal systems and services. 

Please Note: This position is contingent upon contract award. 

Salary Range: $220,000 - $250,000

Position Responsibilities 

• Engineer, configure, deploy, maintain, and optimize enterprise vulnerability scanning and assessment platforms across networks, endpoints, servers, applications, and cloud environments. 

• Develop and maintain vulnerability assessment architectures, scanning configurations, credentialed assessment capabilities, and supporting integrations to ensure comprehensive enterprise coverage. 

• Implement vulnerability assessment capabilities across Microsoft Azure, AWS, cloud-native infrastructure, containers, and hybrid environments. 

• Design and optimize scanning schedules, assessment policies, discovery methods, and technical configurations to improve vulnerability detection while minimizing operational impacts. 

• Integrate vulnerability management platforms with asset inventories, configuration management databases, SIEM platforms, ticketing systems, and other enterprise cybersecurity technologies. 

• Develop scripts, APIs, automated workflows, and technical solutions that improve vulnerability discovery, data enrichment, prioritization, remediation tracking, and reporting. 

• Conduct advanced technical analysis of vulnerabilities, insecure configurations, exposed services, and potential attack paths to validate findings and identify effective remediation approaches. 

• Collaborate with system owners, infrastructure engineers, and application teams to develop, test, and implement technical remediation solutions that address identified vulnerabilities. 

• Engineer risk-based vulnerability management capabilities that incorporate threat intelligence, known exploitation activity, asset criticality, and technical exposure information. 

• Develop technical dashboards, automated reports, and assessment coverage metrics to measure vulnerability exposure, scanning effectiveness, remediation performance, and program maturity. 

• Support the secure integration and assessment of emerging technologies, including cloud-native services, AI-enabled applications, APIs, and automated infrastructure deployments. 

• Develop technical standards, configuration baselines, engineering documentation, and operating procedures while providing technical guidance and escalation support for complex vulnerability management challenges. 

• U.S. Citizenship required. 

• Remote position, with preference for candidates residing within close proximity to the National Capital Region (NCR). 

• Active Public Trust 6C determination, or the ability to obtain and maintain the required determination. 

• Bachelor Degree and 16 years of experience, Master's Degree and 14+ years of experience or a Phd and 10+ years of experience in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field (or equivalent professional experience). 

• 5–7 years of relevant experience in vulnerability engineering, cybersecurity engineering, vulnerability management, security infrastructure, or related technical cybersecurity disciplines. 

• Demonstrated hands-on experience engineering, deploying, configuring, and maintaining enterprise vulnerability assessment and management technologies. 

• Strong technical experience with vulnerability management platforms such as Tenable, Qualys, Rapid7, or comparable enterprise solutions, including scan configuration, assessment coverage, and platform optimization. 

• Experience securing and assessing enterprise infrastructure across Windows, Linux, network devices, and Microsoft Azure, AWS, or comparable cloud environments. 

• Proficiency with scripting, automation, APIs, and system integration using technologies such as Python, PowerShell, Bash, or comparable tools. 

• Strong understanding of vulnerability management methodologies, CVSS, CVEs, CISA KEV, vulnerability remediation, and risk-based prioritization. 

• Working knowledge of federal cybersecurity requirements, including NIST SP 800-53, NIST SP 800-40, the NIST Risk Management Framework (RMF), and applicable CISA directives. 

• Strong technical troubleshooting, analytical, documentation, and communication skills, with the ability to resolve complex engineering challenges and collaborate across cybersecurity and infrastructure teams.