Practical experience with vulnerability management tools and remediation workflows
Working knowledge of application security concepts (OWASP Top 10, SAST/DAST, dependency scanning)
Experience managing a ticket queue against SLAs with strong ownership and follow-through
Strong written and verbal communication skills for cross-functional collaboration
Solid analytical and troubleshooting skills with the ability to prioritize under competing deadlines
Responsibilities
Own the vulnerability scanning program across endpoints, servers, and cloud infrastructure
Triage, prioritize, and track findings through remediation, partnering with engineering and IT owners
Monitor and report on remediation SLAs; escalate aging or high-severity findings
Improve identity management program through configuration and automation enhancements
Monitor and harden AWS environments, implementing security guardrails and baseline configurations
Support SAST, DAST, and dependency scanning integrated into the CI/CD pipeline
Lead or contribute to security initiatives, collaborating with engineering, IT, and compliance
Benefits
Health Care Plan (Medical, Dental & Vision)
Retirement Plan (401k, IRA)
Life Insurance
Flexible Paid Time Off
9 paid Holidays
Family Leave
Remote work options
Hybrid work for Orlando Associates
Free Food & Snacks (Orlando)
Wellness Resources
Full Job Description
This role is project-driven: you'll own initiatives end to end, from scoping a remediation effort to rolling out a new control, while also handling day-to-day security tickets against defined SLAs. You'll work closely with engineering, IT, and compliance, so clear communication and follow-through matter as much as technical depth.
Responsibilities
Vulnerability Management (Primary Focus)
Own the vulnerability scanning program across endpoints, servers, and cloud infrastructure
Triage, prioritize, and track findings through remediation, partnering with engineering and IT owners
Monitor and report on remediation SLAs; escalate aging or high-severity findings
Maintain vulnerability management documentation, metrics, and recurring reporting
Identity Management
Improve our identity management program through improvements in configurations, automations, to simultaneously improve security and user experience.
