Vulnerability Management Engineer

MAKE STRATEGY A REALITY | ACCELERATE YOUR GROWTH | CHOOSE YOUR PATH

As the world's leading change and transformation consultancy, we're helping businesses move from strategy to reality by taking a pragmatic and practical approach to build solutions that last.

SUMMARY

We are seeking a Vulnerability Management Engineer to support our clients' control center environments by analyzing cyber vulnerability information, conducting risk assessments, and executing mitigation and remediation actions. This role is responsible for ensuring vulnerabilities across control center systems, networks, and supporting infrastructure are identified, prioritized, and addressed in a manner that balances cybersecurity risk with operational availability.

YOU WILL:

• 
  

  Analyze and review cyber vulnerability information from multiple sources, including vulnerability scanners, threat intelligence, advisories, and client-provided assessments

  
  
• 
  

  Validate vulnerability findings, assess exploitability, and determine operational and business impact within control center environments

  
  
• 
  

  Conduct vulnerability risk assessments and document findings, recommendations, and remediation plans

  
  
• 
  

  Perform or coordinate mitigation and remediation actions, including patching, configuration changes, compensating controls, and hardening activities

  
  
• 
  

  Work directly with client control center personnel to plan and execute remediation activities with minimal operational impact

  
  
• 
  

  Track vulnerability remediation status and ensure compliance with defined timelines and risk acceptance processes

  
  
• 
  

  Support vulnerability management activities across control center networks, servers, applications, and specialized systems

  
  
• 
  

  Develop and maintain vulnerability documentation, reports, and metrics for internal teams and client stakeholders

  
  
• 
  

  Assist in responding to high-risk vulnerabilities, zero-day events, and emerging threats affecting control center operations

  
  
• 
  

  Support audits, compliance requirements, and security assessments as required by client environments

  
  

IDEALLY, WE'D LIKE:

• 
  

  3-7+ years of experience in vulnerability management, cybersecurity engineering, or security operations

  
  
• 
  

  Experience analyzing vulnerability scan results and security assessment findings

  
  
• 
  

  Strong understanding of vulnerability scoring, risk assessment, and remediation methodologies

  
  
• 
  

  Hands-on experience performing vulnerability mitigation and remediation actions

  
  
• 
  

  Knowledge of:

  
  
• 
  

  Windows and Linux operating systems

  
  
• 
  

  Network security concepts (firewalls, segmentation, access controls)

  
  
• 
  

  Patch and configuration management processes

  
  

• 
  

  Ability to communicate technical risk and remediation guidance clearly to technical and non-technical stakeholders
  
  Applicants must be authorized to work in the United States, without the need for visa sponsorship by North Highland. Work visa sponsorship will not be provided, either now or in the future, for this position. This is a temporary employee (W2) opportunity.
  
  North Highland is an equal opportunity employer, and we adhere to all applicable laws and regulations to ensure a fair and equitable workplace. All qualified applicants will receive fair and impartial consideration without regard to race, color, sex, gender identity, religion, national origin, age, sexual orientation, disability, veteran status, or any other characteristic protected by law. We handle all information in accordance local privacy standards and maintain strict confidentiality.