About the role
Description
Senior Security Automation Engineer, Vulnerability Management
Summary
Senior Security Automation Engineer responsible for advancing the enterprise Vulnerability Management program through automation, orchestration, and process optimization. Focus on improving efficiency, scalability, and data quality across infrastructure, cloud, and application environments. Partner with Vulnerability Management, Engineering, Infrastructure, Cloud, and ServiceNow teams to enable risk based remediation at scale.
Key Responsibilities
Security Automation and Engineering
- Design, build, and maintain automation solutions supporting enterprise Vulnerability Management
- Develop integrations across vulnerability management platforms, ServiceNow, cloud environments, CMDB, reporting systems, and security tools
- Automate vulnerability intake, enrichment, correlation, prioritization, assignment, exception handling, and remediation tracking
- Reduce manual processes through scripting, APIs, orchestration, and workflow automation
Platform and Workflow Optimization
- Improve and optimize Vulnerability Management workflows and operational processes
- Build automated dashboards, metrics, and reporting for operational and executive stakeholders
- Identify process bottlenecks and implement scalable automation solutions
- Enhance asset inventory correlation, remediation validation, SLA tracking, and risk based prioritization
Data Engineering and Integration
- Develop and maintain scripts, APIs, and data pipelines supporting vulnerability data normalization and enrichment
- Integrate security platforms including Qualys, Tenable, Wiz, ServiceNow, and cloud technologies
- Ensure data accuracy, consistency, and reliability across platforms and reporting systems
- Support data analysis and reporting for regulatory, audit, and operational requirements
Collaboration and Continuous Improvement
- Partner with infrastructure, cloud, engineering, and security teams to improve remediation workflows and maturity
- Support automation aligned with DevSecOps and enterprise modernization initiatives
- Research emerging technologies and identify opportunities for automation and scalability
- Participate in troubleshooting, root cause analysis, and continuous improvement across the Vulnerability Management ecosystem
Qualifications
Required Experience and Skills
- 5+ years of experience in cybersecurity engineering, security automation, or Vulnerability Management
- Strong scripting skills using Python, PowerShell, Bash, or similar languages
- Experience integrating security tools and workflows using APIs and automation platforms
- Familiarity with Qualys, Tenable, Rapid7, Wiz, and ServiceNow
- Strong understanding of Vulnerability Management processes and remediation workflows
- Knowledge of cloud platforms, REST APIs, and automation best practices
- Strong analytical, troubleshooting, and communication skills
Preferred Experience
- Experience with ServiceNow SecOps or Vulnerability Response
- Familiarity with DevSecOps, CI CD pipelines, and infrastructure as code
- Experience with cloud and container security technologies
- Knowledge of regulatory frameworks such as PCI DSS, NIST, or FFIEC
- Experience in large enterprise or regulated environments
Education and Certifications
- Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or related field, or equivalent experience
- Certifications such as CISSP, Security+, GSEC, GCSA, or cloud security certifications preferred
Why Work for Us
At Citizens, you'll find a customer-centric culture built around helping our customers and giving back to our local communities. When you join our team, you are part of a supportive and collaborative workforce, with access to training and tools to accelerate your potential and maximize your career growth.
Millions of jobs, with real people getting hired every day
Questions, answered
Click "Apply with JobAssist" – we tailor your resume and application to this role and submit it for your approval.
Yes. This role at Citizens was screened before publishing – we confirmed the employer before listing it.
The employer didn't disclose a salary range for this listing. JobAssist shows pay whenever it's available.
This position can be done from anywhere, with no in-office requirement.
Yes – every application is tailored from your profile and this job's requirements, and you can review and edit before it's sent.