Paragon Cyber Solutions is a woman-, veteran-, and minority-owned cybersecurity and IT services firm that supports government and commercial clients with compliance, cyber defense, and mission-focused technology solutions. Our team takes pride in solving complex technical challenges and delivering innovative, customer-focused outcomes.
The Vulnerability Management Engineer III is responsible for leading vulnerability identification, assessment, prioritization, remediation tracking, and reporting activities across enterprise environments. This role serves as a subject matter expert on vulnerability management platforms, security risk analysis, automation, and compliance reporting.
This position is contingent upon contract award.
- Administer and optimize enterprise vulnerability management platforms.
- Conduct vulnerability scanning, assessment, and remediation tracking.
- Analyze CVEs, CVSS scores, threat intelligence, and exploitability.
- Develop remediation plans with system owners and infrastructure teams.
- Automate vulnerability reporting, ticketing, and remediation workflows.
- Produce executive-level dashboards and security metrics.
- Support federal audits, security assessments, and compliance activities.
- Develop standard operating procedures and platform documentation.
- Improve asset inventory accuracy and vulnerability coverage.
- Assist with patch management coordination and verification.
Education
- Bachelor's degree or equivalent experience.
Experience
- 5+ years of vulnerability management or security engineering experience.
- Experience with process automation and reporting.
- Splunk dashboard, reporting, and query development.
- Experience generating scan evidence, mitigation documentation, and audit artifacts.
- Experience supporting federal cybersecurity directives and data calls.
- SOP development for vulnerability management programs.
Experience with vulnerability assessment platforms such as:
Strong experience with:
- Asset management
- Patch management
- Vulnerability remediation workflows
Preferred Certifications (one or more): Must meet IAM Level II IAWF baseline certification standards under DoD 8140/8570.01-M, with at least one of the following:
- CAP (Certified Authorization Professional)
- CASP+ CE (CompTIA Advanced Security Practitioner)
- CISM (Certified Information Security Manager)
- CISSP (or Associate)
- GSLC (GIAC Security Leadership Certification)
- CCISO (Certified Chief Information Security Officer)
- HCISPP (HealthCare Information Security and Privacy Practitioner)
- Health Care Plan (Medical, Dental & Vision).
- Retirement Plan (401K w/ employer matching).