{"id":2748765,"url":"https://alion.io/job/core-specialty-vulnerability-management-specialist","title":"Vulnerability Management Specialist","company":{"id":4418364,"name":"Core Specialty","domain":"corespecialty.com","url":"https://alion.io/company/core-specialty","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Cincinnati, United States","Dallas, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":70000,"max_usd":136000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":425},"experience_years_min":4,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CVSS","optional":false},{"name":"ISO 27001","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"PowerShell","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"SLI/SLO/SLA","optional":false}],"status":"live","first_seen_at":"2026-10-15T00:00:00Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-18T07:57:38Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"-\nThe Vulnerability Management Specialist is a hands-on individual contributor responsible for executing Core Specialty’s vulnerability management program across endpoints, servers, cloud resources, and applications. This role focuses on continuous vulnerability scanning, risk analysis, remediation coordination, and reporting, working closely with IT, Infrastructure, Endpoint, and Threat teams.\nThe ideal candidate is highly analytical, detail-oriented, and comfortable operating in a metrics-driven, SLA-based environment, with the ability to translate technical findings into actionable remediation guidance.\nThe selected candidate will be required to work a hybrid schedule (3 days in office/2 remote) out of our Dallas, TX, or Cincinnati, OH office. No relocation assistance is being offered with this role.\nKey Accountabilities/Deliverables:\nConduct continuous vulnerability scanning across enterprise assets using Qualys and related tools.\n\nAnalyze scan results to validate findings, remove false positives, and assess exploitability.\n\nPrioritize vulnerabilities using CVSS, Qualys Detection Score (QDS), asset criticality, and business impact.\n\nEnforce remediation SLAs aligned to severity levels: Critical: 7 days, High: 30 days, Medium: 60 days, Low: 180 days.\n\nPartner with Infrastructure, EUC, Cloud, and Application teams to drive timely remediation.\n\nSupport remediation activities using Qualys, Intune, JAMF, PolicyPak, and Microsoft Defender.\n\nEnsure vulnerability management activities aligned with NIST, CIS Controls, ISO 27001, and insurance regulatory expectations.\n\nPartner with Threat Intelligence and SOC teams to assess vulnerability exposure related to active threats.\n\nDevelop scripts (PowerShell) and workflows to support remediation, reporting, and validation.\n\nTechnical Knowledge and Understanding:\nStrong understanding of: CVSS scoring and risk prioritization, patch management and remediation workflows, endpoint, server, and cloud security fundamentals.\n\nAbility to analyze technical findings and communicate risk clearly to non-security teams.\n\nStrong documentation and organizational skills.\n\n Experience required:\n4+ years of experience in vulnerability management, security engineering, or threat operations.\n\nHands-on experience with vulnerability scanning platforms (Qualys preferred; Tenable/Rapid7 acceptable).\n\nExperience working with Intune, JAMF, or similar endpoint management tools.\n\n Certifications (Preferred):\nCompTIA Security+\n\nQualys Vulnerability Management certifications\n\nGIAC certifications (e.g., GSEC, GCIH)\n\nCISSP (or progress toward certification)\n\n Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa for this position.\n#LI-Hybrid\n-\nAt Core Specialty, you will receive a competitive salary and opportunities for professional development and advancement. We offer medical, dental, vision, and life insurances; short and long-term disability; a Company-match of 100% of a 6% contribution 401(k) plan; an Employee Assistance Plan; Health Savings Account, Flexible Spending Account, Health Reimbursement Account, and a wellness program","description_format":"text","description_chars":3180,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Life insurance","Professional development","Relocation assistance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":true,"industries":["Endpoint Security","Information Security","Vulnerability Management","Reinsurance"],"lifecycle":[{"event":"open","at":"2026-10-16T23:22:59Z"}],"visa":[],"liveness":{"score":99,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.993,"p_room":1,"age_days":2,"expected_fill_days":24,"reasons":["conf:1","urgency","velocity","win:early"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/core-specialty-vulnerability-management-specialist","json_url":"https://alion.io/job/core-specialty-vulnerability-management-specialist.json","meta":{"generated_at":"2026-10-18T10:01:42Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14875,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4418364},"rest":"https://alion.io/mcp/rest/get_company?id=4418364"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcore-specialty-vulnerability-management-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcore-specialty-vulnerability-management-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcore-specialty-vulnerability-management-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/core-specialty-vulnerability-management-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcore-specialty-vulnerability-management-specialist"}]}