Vulnerability Management Systems Engineer

Position Summary

The Vulnerability Management Systems Engineer strengthens the organization’s security posture by evaluating and remediating system, application, and infrastructure vulnerabilities across on‑premises and cloud environments. The role combines technical analysis, hands‑on engineering, risk evaluation, and cross‑team collaboration to support secure operational practices. It spans the full vulnerability management lifecycle—discovery, assessment, remediation, and reporting—while guiding remediation strategies, creating repeatable validation processes, improving automation, and monitoring system behavior to ensure stability and resilience against evolving threats.

Primary Success Factors

• Analyze identified vulnerabilities to determine potential impact and required remediation actions.

• Collaborate with infrastructure and application teams to coordinate remediation activities, ensuring changes are tested and validated thoroughly.

• Develop frameworks and workflows that guide consistent vulnerability remediation practices across servers, applications, and cloud environments.

• Assist in automating assessment and remediation routines where possible, improving efficiency and reliability.

• Monitor systems during remediation efforts to confirm stability, performance, and successful implementation of patches or configuration changes.

• Maintain awareness of emerging threats, industry trends, and evolving attacker tactics; recommend updates to remediation approaches accordingly.

• Contribute to secure configuration baselines and support the engineering of hardened templates for virtual, physical, and cloud systems.

• Support operational excellence by troubleshooting system issues related to remediation, performance, or availability.

• Generate clear reporting and visibility into vulnerability trends, remediation progress, and risk reduction activities.

• Ensure alignment with organizational policies, regulatory expectations, and security best practices.

• Monitor AI-enabled systems for performance and reliability during remediation and adjust strategies based on real-time insights and predictive analytics.

• Collaborate with technical teams to integrate AI solutions into existing processes, ensuring continuous improvement and adaptation to evolving threat landscapes.

• Develop and refine automated workflows for provisioning, updating, and hardening virtual machines and cloud resources, leveraging Terraform modules and best practices.

• Continuously improve image templates and deployment pipelines to align with organizational standards and evolving security requirements.

Required Experience

• Bachelor of Science degree in Information Systems or equivalent work experience 

• Five years of experience in technical support role, including three years of experience as a system administrator for Windows

• Demonstrated networks, operating systems, system monitoring, security and technology infrastructure experience; specializing in one or more technical areas where a thorough and detailed understanding of the environment is required, and certification in areas of specialization is preferred 

• Demonstrated analytical skills with creative innovative approaches to problem-solving 

• Strong communication and presentation skills, ability to function as a member of a team and ability to manage multiple projects and tasks concurrently 

• Knowledge of sound, industry-accepted server software support practices and methodologies 

• Experience with vulnerability analysis, patch assessment and vulnerability scoring tools

• Knowledge of vulnerability scoring systems (CVSS Scores) 

• Proven analytical and troubleshooting abilities across performance, availability, and security scenarios.

• Effective communicator able to collaborate across technical teams and manage multiple priorities in a fast-moving environment.

• Experience with modern automation and engineering practices (Terraform, CI/CD, AI-driven tooling preferred).

It is the policy of the Federal Home Loan Bank of Pittsburgh to ensure equal employment opportunity (EEO) for all employees and applicants for employment without regard to race, religion, color, sex, national origin, age, disability status, genetic information, veteran's status, ancestry, sexual orientation or status as a parent as defined by applicable law. It is the Bank's policy to comply with applicable laws concerning the employment of persons with disabilities, including reasonable accommodation for applicants and employees with disabilities.