{"id":3103978,"url":"https://alion.io/job/toyota-tsusho-vulnerability-management-engineer","title":"Sr. Vulnerability Management Analyst","company":{"id":8078,"name":"Toyota Tsusho","domain":"toyota-tsusho.com","url":"https://alion.io/company/toyota-tsusho-systems","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"A","score":96,"open_postings":7,"ghost_share":0,"stale_share":0.143,"repost_share":0,"time_to_fill_p50_days":36,"computed_at":"2026-10-27T05:46:45Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"contractor","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Plano, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":87000,"max_usd":197000,"period":"year","method":"role_country_seniority_unknown","sample_n":3638},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CVE","optional":false},{"name":"CVSS","optional":false},{"name":"EPSS","optional":false},{"name":"KEV","optional":false},{"name":"Linux","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Windows","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"Jira","optional":true},{"name":"Microsoft Sentinel","optional":true},{"name":"Power BI","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"ServiceNow","optional":true},{"name":"SIEM","optional":true},{"name":"Splunk","optional":true}],"status":"live","first_seen_at":"2026-10-22T18:21:32Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-27T17:19:42Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"About TTS-US: Founded in 2011, Toyota Tsusho Systems US, Inc. (TTS-US) is a Toyota group company that develops IT, cybersecurity, and technology solutions to support Toyota’s global business operations. With eight TTS affiliates worldwide, TTS-US is helping establish a secure and resilient Toyota global value chain while continuing to expand its capabilities across cybersecurity, IT consulting, project support, and enterprise solutions.\n\nSummary\n We are seeking a Sr. Vulnerability Management Analyst to support and mature an enterprise Vulnerability Management program. This hands-on role owns vulnerabilities across the full lifecycle-from identification and technical triage through prioritization, remediation coordination, validation, and closure. The ideal candidate combines strong vulnerability platform expertise with the ability to translate technical findings into clear, risk-based actions for infrastructure, application, cloud, security, and business stakeholders.\nKey Responsibilities\nOwn vulnerability findings from identification and triage through remediation, validation, and closure.\nAnalyze scanner results and contextual risk data, including CVE, CVSS, CISA KEV, EPSS, vendor advisories, threat intelligence, exploitability, exposure, and business impact.\nInvestigate findings to determine applicability, affected technology, root cause, severity, ownership, and organizational risk.\nIdentify false positives, duplicate findings, accepted risks, compensating controls, and exceptions requiring additional validation or documentation.\nIdentify responsible infrastructure, application, cloud, system, or business owners and communicate remediation requirements clearly.\nTrack findings against remediation timelines and SLAs; follow up, escalate overdue or high-risk vulnerabilities, and support emergency response to critical or actively exploited threats.\nProvide remediation teams with technical context, vendor guidance, mitigation options, and practical recommendations.\nValidate remediation through rescanning, targeted testing, manual review, or supporting evidence and ensure accurate disposition in the vulnerability platform.\nOperate and optimize enterprise vulnerability management platforms such as Qualys VMDR, Tenable, Rapid7, or equivalent technologies.\nMaintain searches, dashboards, asset groups, tags, reports, authentication, agents, scan coverage, and data quality.\nDevelop risk-based metrics and reporting on vulnerability trends, aging, recurrence, remediation performance, and systemic weaknesses.\nPartner with Asset Management, Infrastructure, Cloud, Application Security, Security Operations, Threat Intelligence, Governance, and business teams to improve coverage, ownership, and remediation outcomes.\nMaintain procedures, playbooks, and program documentation; identify opportunities to automate repeatable workflows and improve program maturity.\nProvide technical guidance and mentorship to junior team members.\nRequirements\nBachelor’s degree in Information Technology, Cybersecurity, Computer Science, Business, or a related field (or equivalent experience).\n4-8 years of hands-on experience in vulnerability management, security engineering, infrastructure security, or a closely related cybersecurity discipline.\nDemonstrated ownership of the complete vulnerability lifecycle: identification, triage, risk evaluation, ownership determination, stakeholder outreach, remediation tracking, escalation, validation, and closure.\nStrong hands-on experience with Qualys VMDR, Tenable, Rapid7, or an equivalent enterprise vulnerability management platform.\nStrong knowledge of CVE, CVSS, CPE, exploitability, severity, compensating controls, remediation, mitigation, false positives, risk acceptance, and vulnerability prioritization.\nAbility to independently interpret scanner results, investigate findings, assess practical risk, and determine appropriate remediation actions.\nExperience managing high volumes of vulnerability data in a large or complex enterprise environment.\nExperience identifying system or application owners and driving remediation across multiple technical teams.\nExperience validating remediation through rescanning, technical testing, manual review, or evidence assessment.\nStrong working knowledge of Windows, Linux, networking, servers, databases, middleware, virtualization, and cloud environments.\nUnderstanding of remediation methods including patching, configuration changes, software upgrades, compensating controls, and service removal.\nStrong analytical, troubleshooting, documentation, stakeholder communication, prioritization, and organizational skills.\nAbility to work independently while managing multiple remediation efforts and collaborating across technical and business teams.Preferred Qualifications\n\nAdvanced Qualys VMDR experience, including vulnerability detection, asset inventory, tagging, dashboards, reporting, authentication, and agent-based assessments.\nExperience with attack surface management or external exposure management technologies.\nExperience supporting AWS, Microsoft Azure, or Google Cloud Platform environments.\nExperience integrating vulnerability platforms with ticketing, SIEM, SOAR, CMDB, asset management, or reporting solutions.\nExperience with Jira, ServiceNow, Splunk, Microsoft Sentinel, Power BI, or similar enterprise platforms.\nFamiliarity with CISA KEV, EPSS, vendor threat intelligence, and exploit intelligence sources.\nScripting or automation experience using Python, PowerShell, APIs, or similar technologies.\nExperience with remediation SLAs, risk exceptions, governance processes, security frameworks, or regulatory requirements.\nRelevant certifications such as Security+, CISSP, GIAC, Qualys certifications, or equivalent industry credentials.","description_format":"text","description_chars":5776,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Information Security","Vulnerability Management","Automotive Components"],"lifecycle":[{"event":"open","at":"2026-10-22T18:21:32Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 2 · green card filings: 2","filings_12m":2,"filings_prev_12m":1,"green_card_filings_12m":2,"median_offered_wage_usd":157500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":4,"expected_fill_days":36,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/toyota-tsusho-vulnerability-management-engineer","json_url":"https://alion.io/job/toyota-tsusho-vulnerability-management-engineer.json","meta":{"generated_at":"2026-10-27T17:38:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7332,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8078},"rest":"https://alion.io/mcp/rest/get_company?id=8078"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftoyota-tsusho-vulnerability-management-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftoyota-tsusho-vulnerability-management-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftoyota-tsusho-vulnerability-management-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/toyota-tsusho-vulnerability-management-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftoyota-tsusho-vulnerability-management-engineer"}]}