Description
Hewlett Packard Enterprise is seeking a Vulnerability Security Engineer to join their team. As a Vulnerability Security Engineer at HPE, you will be responsible for identifying, prioritizing, and driving remediation of security vulnerabilities while leveraging automation and AI-driven solutions to reduce cyber risk and improve operational efficiency.
Your role will focus on the continuous improvement of the organization's vulnerability management program by identifying, prioritizing, and partnering with technology teams to remediate security vulnerabilities at scale. You will apply your knowledge of vulnerability management to protect HPE’s applications and infrastructure.
Key responsibilities include:
- Managing the enterprise vulnerability management program, including vulnerability identification, assessment, prioritization, and remediation tracking.
- Performing and maintaining vulnerability scanning across servers, endpoints, cloud environments, network devices, containers, and applications.
- Analyzing vulnerability scan results and validating findings to reduce false positives and improve remediation effectiveness.
- Partnering with infrastructure, cloud, application, and engineering teams to drive timely remediation of security vulnerabilities.
- Assessing vulnerabilities using CVSS scores, threat intelligence, exploitability, and business risk to prioritize remediation activities.
- Monitoring emerging threats, zero-day vulnerabilities, and security advisories, providing guidance on organizational impact and required actions.
- Developing metrics, dashboards, and reporting to communicate vulnerability trends, remediation performance, and risk reduction to leadership.
- Conducting vulnerability assessments and security reviews for new technologies, infrastructure deployments, and cloud services.
- Maintaining and administering vulnerability management tools such as Rapid7 InsightVM, Tenable, Qualys, CrowdStrike Exposure Management, or similar platforms.
- Collaborating with application security teams to integrate vulnerability management into the software development lifecycle.
- Assisting with audit, regulatory, and compliance activities by providing evidence and reporting related to vulnerability management controls.
- Designing, developing, and maintaining automation solutions that streamline vulnerability management processes, improve operational efficiency, and reduce manual effort across security and technology teams.
- Evaluating, implementing, and optimizing AI-driven security capabilities to enhance vulnerability analysis, risk prioritization, remediation workflows, and data-driven cybersecurity decision-making.
Requirements:
- 6+ years of experience in vulnerability management, security engineering, cybersecurity operations, or a related security discipline.
- Experience conducting vulnerability assessments and coordinating remediation activities across infrastructure, cloud, and application environments.
- Hands-on experience with vulnerability management platforms such as Rapid7 InsightVM, Qualys, Tenable Nessus, CrowdStrike Exposure Management, or equivalent tools.
- Knowledge of vulnerability scoring methodologies, including CVSS, EPSS, and risk-based prioritization approaches.
- Experience supporting Windows, Linux, cloud, and network technologies.
- Understanding of common security vulnerabilities, misconfigurations, and attack techniques.
- Experience working with cloud platforms such as AWS, Azure, or Google Cloud Platform.
- Familiarity with security frameworks and standards including NIST, CIS Controls, PCI-DSS, ISO 27001, and SOC 2.
- Experience creating executive-level metrics, dashboards, and risk reporting.
Preferred qualifications:
- Experience with vulnerability management automation and scripting (PowerShell, Python, Bash, or similar).
- Experience integrating vulnerability findings into ticketing and workflow platforms such as ServiceNow or Jira.
- Knowledge of application security concepts including SAST, DAST, container security, and software composition analysis.
- Professional certifications such as Security+, CySA+, GSEC, GCIH, CISSP, or equivalent.
- Experience supporting large enterprise environments and risk-based vulnerability management programs.
The expected salary/wage range for this position is $110,000 - $253,000 per year in Michigan.