[Hiring] Vulnerability Engineer @ECS Tech Inc

Role Description

ECS is seeking an experienced Vulnerability Engineer to join an enterprise-scale cybersecurity program supporting a major federal civilian agency. This position supports remote work, with preference given to candidates residing in or near the National Capital Region (NCR).

In this role, you will:

• Engineer, implement, integrate, and optimize enterprise vulnerability management capabilities across complex on-premises, cloud, and hybrid environments.
• Collaborate with cybersecurity architects, security engineers, system administrators, vulnerability analysts, and government stakeholders to improve vulnerability discovery, strengthen assessment coverage, automate security processes, and support effective remediation of exploitable weaknesses.
• Help modernize vulnerability management operations, improve enterprise security visibility, and reduce cybersecurity risks affecting mission-critical federal systems and services.

Please Note: This position is contingent upon contract award.

Salary Range: $220,000 - $250,000

Qualifications

• U.S. Citizenship required.
• Remote position, with preference for candidates residing within close proximity to the National Capital Region (NCR).
• Active Public Trust 6C determination, or the ability to obtain and maintain the required determination.
• Bachelor Degree and 16 years of experience, Master's Degree and 14+ years of experience or a PhD and 10+ years of experience in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field (or equivalent professional experience).
• 5–7 years of relevant experience in vulnerability engineering, cybersecurity engineering, vulnerability management, security infrastructure, or related technical cybersecurity disciplines.
• Demonstrated hands-on experience engineering, deploying, configuring, and maintaining enterprise vulnerability assessment and management technologies.
• Strong technical experience with vulnerability management platforms such as Tenable, Qualys, Rapid7, or comparable enterprise solutions, including scan configuration, assessment coverage, and platform optimization.
• Experience securing and assessing enterprise infrastructure across Windows, Linux, network devices, and Microsoft Azure, AWS, or comparable cloud environments.
• Proficiency with scripting, automation, APIs, and system integration using technologies such as Python, PowerShell, Bash, or comparable tools.
• Strong understanding of vulnerability management methodologies, CVSS, CVEs, CISA KEV, vulnerability remediation, and risk-based prioritization.
• Working knowledge of federal cybersecurity requirements, including NIST SP 800-53, NIST SP 800-40, the NIST Risk Management Framework (RMF), and applicable CISA directives.
• Strong technical troubleshooting, analytical, documentation, and communication skills, with the ability to resolve complex engineering challenges and collaborate across cybersecurity and infrastructure teams.

Requirements

• Engineer, configure, deploy, maintain, and optimize enterprise vulnerability scanning and assessment platforms across networks, endpoints, servers, applications, and cloud environments.
• Develop and maintain vulnerability assessment architectures, scanning configurations, credentialed assessment capabilities, and supporting integrations to ensure comprehensive enterprise coverage.
• Implement vulnerability assessment capabilities across Microsoft Azure, AWS, cloud-native infrastructure, containers, and hybrid environments.
• Design and optimize scanning schedules, assessment policies, discovery methods, and technical configurations to improve vulnerability detection while minimizing operational impacts.
• Integrate vulnerability management platforms with asset inventories, configuration management databases, SIEM platforms, ticketing systems, and other enterprise cybersecurity technologies.
• Develop scripts, APIs, automated workflows, and technical solutions that improve vulnerability discovery, data enrichment, prioritization, remediation tracking, and reporting.
• Conduct advanced technical analysis of vulnerabilities, insecure configurations, exposed services, and potential attack paths to validate findings and identify effective remediation approaches.
• Collaborate with system owners, infrastructure engineers, and application teams to develop, test, and implement technical remediation solutions that address identified vulnerabilities.
• Engineer risk-based vulnerability management capabilities that incorporate threat intelligence, known exploitation activity, asset criticality, and technical exposure information.
• Develop technical dashboards, automated reports, and assessment coverage metrics to measure vulnerability exposure, scanning effectiveness, remediation performance, and program maturity.
• Support the secure integration and assessment of emerging technologies, including cloud-native services, AI-enabled applications, APIs, and automated infrastructure deployments.
• Develop technical standards, configuration baselines, engineering documentation, and operating procedures while providing technical guidance and escalation support for complex vulnerability management challenges.

Company Description