Lead Vulnerability Management Engineer

Security.Engineering

Location-specific conditions & benefits*

Argentina

We are in search of a skilled Lead Vulnerability Management Engineer to join our security operations team and lead efforts in securing our technology landscape.

This position requires broad expertise in security engineering and operations, with a specialized focus on vulnerability management. As a lead, you will oversee the design, execution, and optimization of our vulnerability management program while mentoring team members and driving organizational accountability for security practices.

Responsibilities

Design, lead, execute, and continuously improve a comprehensive vulnerability management program, ensuring the proactive identification, prioritization, and remediation of security vulnerabilities
Mentor and guide team members in vulnerability management best practices while fostering a culture of security awareness across organizational teams
Partner with IT, network operations, application development, and compliance teams to enforce effective resolution of vulnerability issues and improve cross-functional collaboration
Perform and oversee regular vulnerability assessments and penetration testing, offering advanced recommendations and detailed remediation guidance
Establish, update, and enforce policies, procedures, and documentation for vulnerability management in alignment with industry standards, compliance mandates, and organizational goals
Lead the monitoring of vulnerability feeds, security advisories, and threat intelligence, anticipating and mitigating risks from emerging threats
Manage the operations of vulnerability scanning across cloud-native environments, enterprise systems, and third-party integrations, ensuring comprehensive reporting and risk assessment
Collaborate with engineering and operations teams to prioritize and deploy critical security patches, adjustments, or mitigations in time-sensitive scenarios
Develop and present vulnerability management metrics, analysis, and progress reports to executive leadership, articulating risk in relation to business objectives
Coordinate and oversee incident responses for issues stemming from identified vulnerabilities, ensuring resolution aligns with established SLAs

Requirements

5+ years of experience in a related role, encompassing vulnerability management and broader information security responsibilities
At least 1 year of relevant leadership experience
Relevant degree, recognized advanced cybersecurity certifications such as CISSP, OSCP, CEH, or related experience
Extensive expertise in vulnerability scanning and management tools such as Prisma, Rapid7, Contrast, Defender, AWS Inspector, Wiz, and emerging technologies
In-depth knowledge of vulnerability management frameworks, advanced penetration testing methodologies, and current industry-leading practices
Proven ability to evaluate and manage vulnerabilities across complex, hybrid environments including networks, systems, applications, and multi-cloud architectures
Exceptional troubleshooting and strategic decision-making skills with an emphasis on attention to detail and operational efficiency
Strong leadership, communication, and collaboration skills with demonstrated experience engaging both technical and non-technical stakeholders
Proven ability to translate technical findings into business-relevant context for reporting to senior management or decision-makers

Benefits

International projects with top brands
Work with global teams of highly skilled, diverse peers
Healthcare benefits
Employee financial programs
Paid time off and sick leave
Upskilling, reskilling and certification courses
Unlimited access to the LinkedIn Learning library and 22,000+ courses
Global career opportunities
Volunteer and community involvement opportunities
EPAM Employee Groups
Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn