[Remote] Senior Security Vulnerability Engineer

Note: The job is a remote job and is open to candidates in USA. AspenView Technology Partners is dedicated to transforming how organizations utilize technology, focusing on building high-performing IT teams for North American clients. They are seeking a Senior Security Vulnerability Engineer to lead and enhance a scalable vulnerability management program, collaborating across teams to ensure effective identification and remediation of vulnerabilities.ResponsibilitiesOwn and advance the enterprise vulnerability management lifecycle — scanning, triage, risk scoring, remediation tracking, validation, and continuous improvementLeverage AI systems to automate patches and configuration changes, driving toward near real-time exploit resolutionOptimize the vulnerability management platform for accurate, automated, and scalable coverage across infrastructure, applications, and cloud environmentsDevelop executive-level metrics and reporting to drive accountability and communicate vulnerability posture to leadershipApply a risk-based prioritization model using CVSS, system criticality, threat intelligence, and compensating controls to determine remediation urgencyPartner cross-functionally with Red Team, IT, Engineering, SRE, and Compliance to identify and mitigate risks tied to end-of-life systems and cloud-native vulnerabilitiesManage scanning exemptions and vulnerability exceptions through their full lifecycle, including documentation, justification, and remediation trackingDrive visibility and remediation of cloud misconfigurations, exposed services, and over-permissioned identities across the organizationSkillsBachelor's degree in Computer Science, Information Security, or a related field — or equivalent practical experience8+ years in cybersecurity, with at least 3 years focused on vulnerability management or risk management in a SaaS environmentHands-on expertise with vulnerability management platforms such as Wiz, Tenable, Qualys, Rapid7, Vulcan, or KennaStrong command of CVSS, patch management, remediation SLA management, and risk-based prioritizationSolid understanding of operating systems (Windows, Linux, macOS), networking, and major cloud platforms (AWS, Azure, GCP)Experience with CSPM/CNAPP platforms such as Wiz, Prisma Cloud, or OrcaExcellent analytical and communication skills with a track record of influencing stakeholders at all levelsExperience with container security and cloud-native environments (Docker, Kubernetes, serverless)Knowledge of security frameworks such as NIST CSF, PCI DSS, SOC 2, or ISO 27001Experience automating remediation workflows or integrating vulnerability data into Jira or ServiceNowRelevant certifications: CISSP, CISM, OSCP, GIAC/GVMS, or cloud security certificationsBenefitsCompetitive baseComprehensive benefits and wellness supportFlexible work model: hybrid, remote, or in-officeReal growth opportunities and leadership visibilityInclusive, respectful culture that blends U.S. innovation with Colombian heartA company that listens, invests in you, and celebrates wins togetherCompany OverviewAspenView Technology Partners offers data engineering, AI, business intelligence and robotic process automation services. It was founded in 2024, and is headquartered in Denver, Colorado, USA, with a workforce of 11-50 employees. Its website is https://aspenview.com/.