Cyber Security Engineer

Cybersecurity Engineer II – Vulnerability ManagementLocation: Austin, TXWork Schedule: Hybrid – 3 days onsite (Tuesday–Thursday), 2 days remote (Monday/Friday)Salary: $149,000–$166,000 base + bonus eligibilityPosition OverviewWe are seeking an experienced Cybersecurity Engineer II to join a growing Security Governance team in Austin. This position will have a primary focus on Vulnerability Management, while also supporting security risk assessments, security controls, and broader cybersecurity initiatives.You will join a collaborative team of cybersecurity engineers responsible for identifying and managing vulnerabilities, conducting risk assessments, supporting security frameworks and compliance activities, and partnering with technical teams across the organization.The environment is primarily Microsoft-based, including Azure and Windows, with some Linux systems.Key ResponsibilitiesManage and mature vulnerability management and security assessment programsIdentify, assess, prioritize, and track vulnerabilities through remediationDevelop vulnerability management metrics, procedures, and supporting documentationMonitor emerging threats and vulnerabilities and coordinate appropriate remediation activitiesPerform security risk assessments for new technologies, IT projects, and third-party vendorsRespond to client and partner security assessments, questionnaires, and auditsApply security frameworks and standards including NIST, ISO 27001, and SOC 2Develop and use PowerShell scripts to automate security and operational processesPartner with Security Architecture and other technical teams to evaluate, recommend, and implement security technologies and controlsProvide information security expertise to technical teams, business leadership, and other stakeholdersSupport the development and maintenance of security policies, standards, processes, and guidelinesAssist with long-term information security strategy, planning, issue management, exceptions, and findingsSupport and mentor junior cybersecurity engineersContribute to additional security initiatives involving IAM, endpoint security, authentication, firewalls, IDS/IPS, encryption, and log analysisRequired Qualifications5+ years of experience in Cybersecurity Engineering, Security Operations Engineering, Vulnerability Management, IT Risk Management, or a similar security functionStrong hands-on experience with vulnerability assessment and vulnerability managementExperience using enterprise vulnerability management technologies such as Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management, or similar toolsHands-on experience conducting security risk assessmentsWorking knowledge and practical experience with security frameworks including:NISTISO 27001SOC 2Strong PowerShell scripting experience, including writing scripts to automate security or operational tasksExperience working within hybrid-cloud environmentsExperience with Microsoft Azure and Windows environmentsWorking knowledge of Linux environmentsStrong communication skills with the ability to explain security risks and recommendations to both technical and non-technical stakeholdersPreferred QualificationsExperience with Azure security technologies such as Microsoft Defender for Cloud and Microsoft Entra IDExperience with Endpoint Detection and Response (EDR) and anti-malware technologiesIdentity and Access Management (IAM) and authentication systems experienceExperience with firewalls, IDS/IPS, encryption, and log analysisBachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related discipline, or equivalent professional experienceCybersecurity certifications such as CISSP, CEH, OSCP, or similar