{"id":1085890,"url":"https://alion.io/job/nasuni-security-engineer-ii-cloud-vulnerability-management","title":"Security Engineer II - Cloud & Vulnerability Management","company":{"id":3836,"name":"Nasuni","domain":"nasuni.com","url":"https://alion.io/company/nasuni","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":78,"open_postings":16,"ghost_share":0,"stale_share":0.875,"repost_share":0,"time_to_fill_p50_days":40,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":85000,"max_usd":171000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":84},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CVE","optional":false},{"name":"CVSS","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"Wiz","optional":false},{"name":"CIS Benchmarks","optional":true},{"name":"EPSS","optional":true}],"status":"live","first_seen_at":"2026-06-15T13:50:35Z","employer_posted_date":"2026-10-01","last_verified_at":"2026-10-17T14:09:20Z","board_verified":true,"closed_at":null,"days_open":124,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":123},"description":"Security Engineer II - Vulnerability Management\nLocation: United States - Remote\nAbout the role\nNasuni is hiring a Security Engineer II to strengthen vulnerability management across our cloud workloads, on-premises infrastructure, network assets, and employee endpoints.\nYou will own the recurring operational work that turns security findings into measurable risk reduction: maintaining scanning coverage, triaging vulnerabilities, setting risk-based priorities, coordinating remediation, tracking service-level commitments, validating closure, and producing actionable reporting.\nThis is a hands-on vulnerability-management position. It is well suited to someone who has personally owned, shaped and operated vulnerability workflows and followed findings through remediation-not someone primarily seeking a cloud architecture, security architecture, or SOC analyst role.\nYou will join a well-supported security organization that includes a dedicated SecOps function responsible for most day-to-day detection and incident response. You will lead and contribute to incidents, including but not limited to, when vulnerability, asset and endpoint security, or infrastructure expertise is required. Participation in an on-call rotation is required.\nLevel and scope\nYou will independently manage defined areas of Nasuni’s vulnerability-management program within established security standards. You will make day-to-day prioritization and escalation decisions, coordinate with asset owners, and recommend improvements based on risk trends.\nYou will partner with senior security team members on program strategy, material risk exceptions, and broader security architecture decisions.\nWhat you will do\nOwn recurring vulnerability scanning, triage, prioritization, remediation tracking, exception follow-up, and closure validation across hybrid infrastructure.\nOperate and improve vulnerability-management tooling, including Rapid7 InsightVM or comparable platforms.\nUse Wiz and other asset or cloud-security data to add workload, exposure, ownership, and business context to vulnerability decisions.\nMaintain accurate visibility into servers, network devices, endpoints, cloud workloads, and other in-scope assets by reconciling scanner, endpoint, cloud, and inventory data.\nPrioritize findings using exploitability, exposure, asset criticality, business impact, compensating controls, and available threat intelligence-not CVSS alone.\nPartner with Engineering, SRE, IT, and Infrastructure teams to assign owners, agree on remediation plans, manage blockers, and verify that risk has been reduced.\nTrack remediation SLAs, exceptions, recurring weaknesses, and coverage gaps; escalate material risk using clear evidence.\nProduce concise reporting that helps technical teams act and gives security leadership an accurate view of exposure and progress.\nRecommend practical improvements to patching, configuration hygiene, asset ownership, reporting, and remediation workflows.\nLead and support security incidents as part of an on-call rotation.\nMaintain runbooks, evidence, scan records, and remediation documentation for operational continuity and audit readiness.\nUse AI-assisted tools to accelerate triage, analysis, reporting, and workflow improvement while protecting sensitive data, validating outputs, and remaining accountable for decisions.\nExpected impact\nYou will improve asset and scanning coverage, make remediation priorities more actionable, strengthen SLA performance, improve closure validation, and help reduce recurring vulnerabilities through durable operating improvements.\nWhat you will bring\nMust-have qualifications\nHands-on experience operating a recurring vulnerability management program or major workstream.\nExperience with vulnerability discovery, triage, risk-based prioritization, remediation coordination, and closure validation.\nExperience working with infrastructure, endpoint, network, or cloud asset owners to drive remediation.\nPractical experience with a platform such as Rapid7 InsightVM, Tenable, Qualys, or equivalent.\nExperience supporting security incidents as part of an on-call rotation.\nDemonstrable experience in vulnerability management in a hybrid environment (AWS preferred).\nUnderstanding of CVE/CVSS concepts, exploitability, asset criticality, network exposure, and compensating controls.\nWorking knowledge of infrastructure and network security fundamentals.\nAbility to translate technical findings into clear priorities and actions.\nDemonstrated ownership, follow-through, and early escalation of blockers.\nPractical experience using AI-assisted tools in a professional workflow, with appropriate review, validation, and data-handling judgment.\nPreferred qualifications\nExperience with Rapid7 InsightVM.\nExperience using Wiz or another CSPM platform for cloud workload vulnerability context.\nExperience reconciling scanner data with CMDB, endpoint, cloud inventory, or ticketing systems.\nFamiliarity with CIS Benchmarks, CISA Known Exploited Vulnerabilities, EPSS, and risk-exception workflows.\nScripting, API, workflow-automation, or security-reporting experience.\nIdeal differentiators\nDemonstrated improvement in asset coverage, remediation SLA performance, backlog quality, or recurring-finding rates.\nExperience across cloud, on-premises, network, and endpoint assets.\nExperience creating repeatable, securely validated AI-assisted security workflows.\nExperience guidelines\nTypically, 3-5 years of relevant security experience, including at least 2 years of direct vulnerability-management responsibility. Equivalent practical experience is valued. A relevant degree or certifications such as Security+, CySA+, or a cloud-security certification is helpful but not required.\nWhy work at Nasuni? \nAs part of our commitment to your well-being, we are pleased to offer comprehensive benefits packages to employees across the US. Benefits packages generally include: \nBest in class employee onboarding and training \n\"Take What You Need” paid time off policy \nComprehensive health, dental and vision plans \nCompany-paid life and disability insurance \n401(k) and Roth IRA retirement plan \nGenerous employee referral bonuses \nFlexible remote work policy \n10 Paid Holidays \nWide array of wellbeing offerings \nPre-tax savings accounts with company contributions \nGreat team culture and social activities \nCollaborative workspaces \nFree on-site fitness centers and stocked kitchens in select office locations \nProfessional development resources \nCompensation Transparency: \nIn accordance with U.S. pay transparency laws, Nasuni is committed to providing visibility into compensation for all U.S.-based roles. Click HERE to view our compensation ranges by job grade. Actual compensation will be based on a variety of factors, including a candidate’s experience, skills, education, and work location.\nTo all recruitment agencies: Nasuni does not accept agency resumes. Please do not forward resumes to our job boards, Nasuni employees or any other company location. Nasuni is not responsible for any fees related to unsolicited resumes.\nNasuni is an equal opportunity employer. The equal employment opportunity policy at Nasuni protects employees and job applicants from discrimination on the bases of race, religion, color, sex (including pregnancy, gender identity, and sexual orientation), parental status, national origin, age, disability, family medical history or genetic information, political affiliation, military service, or other non-merit based factors. These protections extend to all management practices and decisions, including recruitment and hiring practices, appraisal systems, promotions, and training and career development programs.\nThis privacy notice relates to information collected (whether online or offline) by Nasuni Corporation and our corporate affiliates (collectively, “Nasuni”) from or about you in your capacity as a Nasuni employee, independent contractor/service provider or as an applicant for an employment or contractor relationship with Nasuni. \nThis privacy notice relates to information collected (whether online or offline) by Nasuni Corporation and our corporate affiliates (collectively, “Nasuni”) from or about you in your capacity as a Nasuni employee, independent contractor/service provider or as an applicant for an employment or contractor relationship with Nasuni.","description_format":"text","description_chars":8354,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Professional development","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Information Security","Vulnerability Management","Backup & Disaster Recovery"],"lifecycle":[{"event":"open","at":"2026-09-21T08:58:01Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1","filings_12m":1,"filings_prev_12m":10,"green_card_filings_12m":0,"median_offered_wage_usd":177500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":4,"band":"cold","label":"Long shot","p_open":1,"p_active":0.153,"p_room":0.28,"age_days":123,"expected_fill_days":40,"reasons":["conf:1","stale_co","velocity","win:tail","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/nasuni-security-engineer-ii-cloud-vulnerability-management","json_url":"https://alion.io/job/nasuni-security-engineer-ii-cloud-vulnerability-management.json","meta":{"generated_at":"2026-10-17T15:25:28Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20859,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3836},"rest":"https://alion.io/mcp/rest/get_company?id=3836"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnasuni-security-engineer-ii-cloud-vulnerability-management"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnasuni-security-engineer-ii-cloud-vulnerability-management"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnasuni-security-engineer-ii-cloud-vulnerability-management"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nasuni-security-engineer-ii-cloud-vulnerability-management\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnasuni-security-engineer-ii-cloud-vulnerability-management"}]}