Vulnerability Management Engineer

Come join Deepwatch’s team of world-class cybersecurity professionals and the brightest minds in the industry. If you're ready to challenge yourself with work that matters, then this is the place for you. We're redefining cybersecurity as one of the fastest growing companies in the U.S. – and we have a blast doing it!

Who We Are

Deepwatch is the leader in managed security services, protecting organizations from ever-increasing cyber threats 24/7/365. Powered by Deepwatch’s cloud-based security operations platform, Deepwatch provides the industry’s fastest, most comprehensive detection and automated response to cyber threats together with tailored guidance from dedicated experts to mitigate risk and measurably improve security posture. Hundreds of organizations, from Fortune 100 to mid-sized enterprises, trust Deepwatch to protect their business. 

Our core values drive everything we do at Deepwatch, including our approach to tackling tough cyber challenges. We seek out tenacious individuals who are passionate about solving complex problems and protecting our customers. At Deepwatch, every decision, process, and hire is made with a focus on improving our cybersecurity solutions and delivering an exceptional experience for our customers. By embracing our values, we create a culture of excellence that is dedicated to empowering our team members to explore their potential, expand their skill sets, and achieve their career aspirations, which is supported by our unique annual professional development benefit.

Deepwatch recognition includes:

• 2025, 2024, 2023, 2022 and 2021 Great Place to Work® Certified
• 2024 Military Times Best for Vets Employers
• 2024 US Department of Labor Hire Vets Gold Award
• 2024 Forbes' America's Best Startup Employers
• 2024 Cyber Defense Magazine, Global Infosec Awards 
• 2023 and 2022 Fortress Cybersecurity Award
• 2023 $180M Series C investment from Springcoast Capital Partners, Splunk Ventures, and Vista Credit Partners of Vista Equity Partners
• 2022 Cybersecurity Excellence Award for MDR

Vulnerability Management Engineer

Hybrid, Tampa, FL

Reporting to the Senior Manager, Platform Security Services, the Vulnerability Management Engineer will be responsible for overseeing the operation of vulnerability assessments for assigned customers, implement and oversee scanning technologies to discover, prioritize security flaws for remediation, and collaborate with system/application owners to facilitate the remediation and closure of vulnerabilities.

The Vulnerability Management Engineer will operationally integrate with the customer’s patch management activities and perform validation of applied and/or missing patches. Additionally, they will perform security testing on pre-production systems and applications to close vulnerabilities prior to production deployment.

In this role, you’ll get to own:

Vulnerability Lifecycle & Managed Services

• Deliver vulnerability management as a service, overseeing multiple workstreams while meeting specific service-level (SLA) commitments.
• Manage the full remediation lifecycle by collaborating with infrastructure and application owners on security hot-fixes and patch validation.
• Perform discovery and grouping of network-connected systems to ensure comprehensive scanning across networks, OSs, apps, and databases.
• Conduct regular scans on both production and pre-production deployments to identify flaws before and after release.
• Create remediation reports and dashboards to track vulnerabilities and remediations
• Assist with attestation scan and compliance report 

Risk Analysis & Technical Strategy

• Analyze vulnerabilities to filter false positives and prioritize remediation based on the actual risk of exploitation.
• Develop remediation action plans and generate tickets for system owners to address identified flaws.
• Speak in-depth on hardening guidelines (NIST, CIS) and implement mitigation factors (Firewalls, IDS/IPS) to reduce risk when patching isn't immediate.
• Analyze new technologies, zero-day threats, and reviews of new technology released by supported vendors to provide mitigation strategies.

Operations, Mentorship & Documentation

• Develop and document Standard Operating Procedures (SOPs) and assist in maintaining automation and scripting tools.
• Support cyber incident response teams with vulnerability discovery and identification during crisis management.
• Mentor, coach, and train o