Job Title: Full stack engineer with Vulnerability Management
Location: Charlotte, NC
Full Time
Job Description
Must Have Technical/Functional Skills
· Full stack developer with experience in following areas, Java, Spring Boot, Maven, Node.js, NPM, React, CI/CD, JUNIT, Tosca, Litmus
· Strong experience in Vulnerability Management and enterprise remediation programs.
· Expertise in Cybersecurity Governance, Risk Management, and Compliance.
· Experience coordinating vulnerability remediation across:
Middleware Platforms, Server/Platform Infrastructure, Databases, Applications, Cloud and On-Prem Environments
· Knowledge of enterprise vulnerability management tools such as Qualys, Tenable, Rapid7, ServiceNow Vulnerability Response.
· Experience managing remediation activities for BI and Analytics platforms: Tableau, MicroStrategy, Cognos, Power BI, TIBCO, Starburst
·Strong understanding of:
CVSS Scoring, Security Risk Ratings, Patch Management, Vulnerability Lifecycle Management, Risk Acceptance / Exception Processes
· Experience with security governance reporting, audit support, and compliance requirements.
· Strong stakeholder management and cross-functional coordination skills.
· ServiceNow, Jira, Confluence
· ITIL Processes (Incident, Change, Problem Management)
· Enterprise Infrastructure & Platform Services
· Vendor Management
· Reporting & Dashboarding (Power BI, Excel)
· Process Improvement and Automation · Banking/Financial Services domain experience preferred
Roles & Responsibilities
· Lead end-to-end execution of enterprise vulnerability remediation initiatives.
· Coordinate remediation efforts across Infrastructure, Middleware, Database, Platform, Application, and Security teams.
· Develop and maintain remediation plans, project schedules, milestones, dependencies, and deliverables.
· Drive closure of security vulnerabilities within enterprise-defined SLAs.
· Facilitate governance meetings, remediation reviews, risk discussions, and executive status updates.
· Partner with Information Security, GIS, Infrastructure Services, Database Services, Middleware Services, Application Support teams, and external vendors.
Track and report:
Open vulnerabilities, Aging vulnerabilities, Compliance status, Risk exposure, Remediation progress
· Escalate overdue remediation activities, resource constraints, and critical risks.
· Ensure remediation activities meet audit, regulatory, and security compliance requirements.
· Maintain remediation evidence and documentation for audits and compliance reviews.
· Monitor vulnerability dashboards and ensure accuracy of governance metrics.
· Drive continuous improvement initiatives around remediation processes, governance, reporting, and automation.
· Act as the central point of contact between technology teams, security teams, leadership, and vendors.