Sr Associate, Cyber Sec Eng

About the Role

The Vulnerability Management Associate is a technical support role within the Vulnerability Management function, providing day-to-day platform administration, technical analysis, data validation, integration monitoring, testing, reporting, and support for enterprise Vulnerability Management technologies. This role works closely with VM Engineers to provide day-to-day technical support across the Vulnerability Management technology ecosystem, with a focus on platform monitoring, troubleshooting, data quality, integration support, testing, reporting, and continuous improvement.

Key Responsibilities

• Provide day-to-day technical and platform support for Qualys, Zafran, Wiz, Aqua Security, and associated integrations.
• Monitor platform health, scanning activity, integrations, data feeds, API jobs, asset coverage, and data completeness.
• Perform initial troubleshooting of scanner, agent, authentication, API, integration, and data-ingestion issues and escalate complex engineering issues to VM Engineers.
• Support Qualys scanner and agent operations, including scan status, authentication results, failed scans, coverage, and troubleshooting.
• Support Qualys Policy Compliance activities, including policy/profile maintenance, control mapping, authentication issues, configuration assessments, and reporting.
• Support Wiz cloud-security and configuration-compliance capabilities, including validation of findings, coverage, data feeds, and integrations.
• Support Aqua and Kubernetes/container security platforms, including monitoring scanning coverage, image/registry/cluster data, integrations, and platform issues.
• Monitor Zafran data ingestion and enrichment from connected security technologies and identify missing, stale, or inconsistent data.
• Validate that vulnerability, asset, threat, exposure, and compensating-control information is flowing correctly into Zafran.
• Support and test Zafran AI agent use cases and automation opportunities identified by VM Engineering.
• Assist VM Engineers with testing and validation of Python/API automation and ServiceNow workflow changes.
• Monitor ServiceNow integrations to ensure vulnerability records, assignments, enrichment, status updates, and closure information are flowing correctly between systems.
• Investigate integration failures, incorrect assignments, missing enrichment, duplicate records, asset-matching issues, and other data-quality problems.
• Support Attack Surface Management by validating discovered assets, investigating ownership and attribution data, and ensuring ASM information flows appropriately into downstream VM platforms.
• Perform UAT/testing and validation for platform upgrades, configuration changes, integrations, new automation, and new security capabilities.
• Assist VM Engineers with POCs, implementations, platform migrations, and integration testing.
• Produce platform-support reporting covering scanner health, coverage, integration status, failed jobs, data quality, enrichment, and other engineering metrics.
• Maintain platform inventories, configurations, support documentation, knowledge articles, procedures, and runbooks.
• Work closely with VM Engineering to identify recurring support issues that should be permanently resolved through engineering or automation.
• Work with VM Operations when platform or data issues affect their remediation processes, while leaving vulnerability remediation ownership with the existing VM Operations team.

Requirements & Tech Stack

• Qualys
• Zafran Security
• Wiz
• Aqua Security
• ServiceNow integrations
• Policy Compliance
• Attack Surface Management (ASM)
• Python/API automation
• Kubernetes/container security
• REST APIs
• JSON
• Linux
• Windows
• Networking
• Enterprise infrastructure

Qualifications

• Experience supporting Vulnerability Management, Security Engineering, Security Platforms, or Cybersecurity Operations technologies.
• Working knowledge of Qualys, Zafran, Wiz, Aqua Security, ServiceNow, ASM, or comparable technologies.
• Understanding of vulnerability scanning, authenticated scanning, agents, asset inventory, and Policy Compliance/configuration assessment.
• Familiarity with cloud, Kubernetes, containers, Linux, Windows, networking, and enterprise infrastructure.
• Basic knowledge of REST APIs, JSON, scripting, and automation concepts; Python experience is preferred.
• Ability to troubleshoot data feeds, integrations, authentication, scanning, coverage, and platform issues.
• Understanding of ServiceNow/CMDB integrations and vulnerability workflows.
• Strong analytical skills with the ability to investigate large datasets and identify coverage, enrichment, integration, and data-quality issues.
• Ability to work closely with engineers and learn complex enterprise security technologies.
• Experience supporting security technologies within a large enterprise environment is preferred.
• 5-8 years of relevant experience is preferred.
• Any infosec certifications or related is desired, not a compulsion.