Security Engineer – Infrastructure Operations

11:11 SYSTEMS

Security Engineer specializing in vulnerability and threat management for Operations. Collaborating on risk reduction and remediation in infrastructure environments at 11:11 Systems.

Posted 7/24/2026full-timeRemote • 🇺🇸 United StatesMid-LevelSenior💰 $90,000 - $125,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Vulnerability and Threat Management, with a strong focus on risk assessment, compliance alignment, and automation of remediation processes. Proficient in leveraging security tools and frameworks to enhance organizational security posture and incident response capabilities.

Highest-signal resume keywords

Vulnerability ManagementThreat Intelligence IntegrationRisk-Based PrioritizationScripting and AutomationCompliance Frameworks

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability Management PlatformsCVSS ScoringPenetration TestingNetwork Security ConceptsCloud PlatformsVirtualization PlatformsScripting (PowerShell, Python, Bash, Ansible)SIEM ToolsEndpoint Protection ToolsContainer Security

Tools & Technologies

Rapid7 InsightVMTenableQualysAWSAzureVMware vSphereFortiSIEMSymantec Endpoint ProtectionDefenderTrend VisionOne

Certifications & Qualifications

CISSPCEHGIAC

Industry Keywords

NIST 800-53CIS BenchmarksPCI-DSSISO 27001OWASP Top 10

Tech Stack

Tools & technologies

AnsibleAWSAzureCloudCyber SecurityFirewallsKubernetesLinuxPythonVMware

About the role

Key responsibilities & impact

Lead and mature the design, implementation, and optimization of enterprise Vulnerability & Threat Management programs.
Operate and tune vulnerability scanning tools (e.g., Rapid7 InsightVM, Tenable, Qualys) across on-prem and cloud environments.
Analyze vulnerability data, prioritize remediation based on risk, exploitability, and business impact.
Integrate threat intelligence feeds and SIEM platforms to enhance detection and response capabilities.
Collaborate with infrastructure, network, and application teams to drive remediation efforts and reduce risk exposure.
Align vulnerability management processes with compliance frameworks (NIST 800-53, CIS Benchmarks, PCI-DSS, ISO 27001), including audit preparation and evidence collection.
Automate vulnerability remediation and reporting workflows using PowerShell, Ansible, or similar tools.
Perform root cause analysis of recurring vulnerabilities and recommend long-term mitigation strategies.
Support and validate patch management processes (WSUS, Automox), ensuring timely remediation aligned with SLAs and compliance requirements.
Develop, define and enforce policies and procedures surrounding secure configuration baselines in accordance with CIS benchmarks and established best practices.
Generate compliance and risk posture reports and dashboards as required.
Lead incident response and threat hunting activities and define processes.
Leverage AI in daily activities to enhance our ability to assess, identify and remediate emerging threats and existing vulnerabilities.

Requirements

What you’ll need

5+ years of experience in cybersecurity, with a strong focus on vulnerability and threat management.
Hands-on experience with vulnerability management platforms (Rapid7 InsightVM preferred).
Strong understanding of CVSS scoring, exploit frameworks, and risk-based prioritization.
Experience managing enterprise Windows and Linux environments.
Strong understanding of virtualization platforms (VMware vSphere/ESXi/VCF) and cloud platforms (AWS, Azure).
Scripting and automation experience (PowerShell, Python, Bash, or Ansible).
Knowledge of network security concepts (firewalls, IDS/IPS, segmentation).
Experience with SIEM tools used for correlating and reporting. (Rapid7 Insight DR, FortiSIEM)
Experience managing endpoint protection tools (Symantec Endpoint Protection, Defender, Trend VisionOne).
Practical experience in Penetration testing and/or red team/blue team activities (network, infrastructure, and/or web applications) and tools used in these activities.
Knowledge of OWASP Top 10 and common web application security risks.
Familiarity with container and Kubernetes security.
Relevant certifications (CISSP, CEH, GIAC, or equivalent).
Must be able to work in the US without a visa sponsorship.

Benefits

Comp & perks

Comprehensive healthcare plan options
Retirement plan with company match
Life, other supplemental insurances
Paid time off and company holidays
New Parent Leave
Wellness programs