Is the Vulnerability Management Engineer role fully remote?

Yes — this Vulnerability Management Engineer role is remote-friendly. The listing is anchored to Multiple, US for tax and payroll purposes, but the client is open to candidates who can work from anywhere the applicant-location requirements allow. Occasional travel for on-site quarterly reviews may be requested; the recruiter will confirm during your calibration call.

Is this a contract or full-time role?

This is a contract opportunity on ApTask's payroll. If selected, you will be employed by ApTask and will receive a W-2 for the duration of your assignment. During your engagement, you will be eligible for subsidized benefits, including medical, dental, vision insurance, a 401(k) plan, commuter benefits, and state-mandated paid sick leave. Your pay cycle (weekly or biweekly, as applicable) will be confirmed at the time of your offer. You'll also have a dedicated ApTask recruiter as your single point of contact throughout your assignment, providing ongoing support from onboarding through completion. Many of our contract opportunities are extended or converted to permanent positions based on business needs and performance. Your recruiter can share the client's historical extension and conversion trends during the interview process. Benefits, assignment duration, extension, conversion opportunities, and eligibility are subject to client requirements, business needs, and applicable plan terms.

What is the compensation range for this role?

The advertised range for this Vulnerability Management Engineer role is $70–$75 per hour. Where you land within the band depends on validated experience, the specific stack calibration match, and — for contract engagements — the bill-rate the client has locked in for this requisition. The recruiter will discuss the exact number during your calibration call.

How quickly does the interview process move?

ApTask's benchmark on this vertical is 19 days on average from résumé submission to signed offer — driven by validated, pre-verified profiles and a client relationship where the hiring manager reviews our shortlist within 48 hours. If your profile is a fit for this role, you can expect the recruiter's first call within one business day.

RemotecontractorReq 26-02481Posted Yesterday

Vulnerability Management Engineer

Contract role in Multiple locations. Remote engagement, matched and submitted by an ApTask vertical recruiter.

Location: Multiple, US · Remote
Compensation: $70–$75/hr

Talk to a recruiter

Your résumé routes to the vertical recruiter who owns this requisition. Identity-verified profile, never resold or syndicated.

About the role

At a glance

AI summary

Day-to-day: Reconcile asset data across Tenable, CrowdStrike, Okta, Active Directory, Intune, and ServiceNow CMDB; build and configure ServiceNow Vulnerability Response workflow; drive remediation waves; author operational runbooks; apply AI models to analysis and reporting
You'll bring: Hands-on experience with Tenable and CrowdStrike Falcon Spotlight; expertise in CVSS, EPSS, CISA KEV risk-based prioritization; ServiceNow Vulnerability Response workflow build capability; remediation orchestration and SLA design; proficiency with ChatGPT Enterprise or Claude
Good fit if: NodeZero or autonomous-pentest familiarity; patch and change-management integration experience; CMDB reconciliation skills; background in insurance, financial services, or regulated industries

Generated from the recruiter description below. The full posting is the source of truth — always read it before applying.

About Client:
The client is a prominent global technology solutions provider, renowned for its comprehensive range of services and products tailored to meet the diverse needs of businesses.
The company's core focus revolves around assisting organizations in managing and optimizing their IT operations, thereby driving productivity, efficiency, and innovation. It offers an extensive array of services, including strategic consulting, technology implementation, cloud computing, data center management, cybersecurity, software licensing, and hardware procurement.
In addition to its business-to-business (B2B) services, it also serves as a valuable resource for IT professionals and decision-makers, providing valuable insights and thought leadership through its various publications, webinars, and events.

Rate Range: $70-$75/Hr

Job Description:

Contract Vulnerability Management Engineer to stand up a mature, sustainable vulnerability management program across Client s large and continuously changing asset estate. Over a 12–16 week engagement the resource will: (1) reconcile an authoritative asset inventory across Tenable, CrowdStrike, identity/endpoint sources, and the ServiceNow CMDB, with coverage-gap identification; (2) baseline current-state vulnerability posture, enriched with exploit intelligence (CVSS, EPSS, CISA KEV, validated-exploitable); (3) build a ServiceNow Vulnerability Response remediation workflow with risk-based prioritization and SLAs, and drive initial remediation waves; and (4) author runbooks and operate the program in steady state.
This is a build-and-operate role - the ServiceNow Vulnerability Response workflow is the core deliverable.

Day-to-day responsibilities:

Reconcile asset data across Tenable, CrowdStrike, Okta / Active Directory / Intune, and the ServiceNow CMDB; identify scanner and agent coverage gaps.
Aggregate and de-duplicate vulnerability findings; baseline posture; enrich with CVSS, EPSS, CISA KEV, and NodeZero validated-exploitable status; produce a risk-ranked register.
Build and configure the ServiceNow remediation workflow (intake prioritize assign track verify/re-scan close); define SLAs; stand up the exception / risk-acceptance process.
Drive initial remediation waves on highest-risk exposures in partnership with asset owners; report program metrics.
Author operational runbooks and operate the program in steady state; provide weekly status.
Apply frontier AI models (ChatGPT Enterprise, Claude) to accelerate de-duplication and analysis, prioritization, reporting, and workflow design.

Criteria, expectations, must-haves, nice-to-haves:
Must-haves:

Hands-on experience operating enterprise vulnerability tooling - Tenable and CrowdStrike (Falcon Spotlight / Exposure Management) at minimum.
Risk-based prioritization using CVSS, EPSS, and CISA KEV; validated-exploitability a plus.
ServiceNow Vulnerability Response / SecOps workflow build. Non-negotiable; this is the engagement s core (capital) deliverable.
Remediation orchestration across infrastructure and application owners; SLA design; metrics and executive-ready reporting.
Proficiency with AI frontier models (e.g., ChatGPT Enterprise, Claude) applied to security-engineering work, with an understanding of secure, governed AI use in an enterprise setting.

Nice-to-haves:

NodeZero or other autonomous-pentest familiarity; patch and change-management integration; CMDB reconciliation.
Insurance, financial-services, or other regulated-industry experience.
Expectations: Self-directed build-and-operate; comfortable driving remediation through other teams and holding SLAs.

Environmental details (work setting, culture, tools):

Fully remote. Collaborative, fast-paced IT Security engineering team operating in a SAFe Agile model. ServiceNow is used for ITSM and SecOps; Zoom for collaboration.
The culture is AI-forward, with frontier models actively used across security workflows. A heavy M&A cadence means the environment changes constantly.

Technology they will be supporting:

Tenable; CrowdStrike (Falcon Spotlight / Exposure Management, NG-SIEM); NodeZero; Okta, Active Directory, Intune / MDM; ServiceNow (Vulnerability Response, SecOps, CMDB); ChatGPT Enterprise and Claude.

Team dynamics:

Joins an approximately 11-person security engineering team under IT Security leadership. Works closely with the in-house ServiceNow SecOps developer on the Vulnerability Response workflow build, coordinates remediation with infrastructure, endpoint, and application owners, and partners with the Compliance team on the exception / risk-acceptance process. Operates within SAFe Agile cadences.

Projects the resource will be involved in upon start:

The Vulnerability Management project: asset and coverage inventory, current-state vulnerability assessment, the ServiceNow Vulnerability Response remediation workflow build with SLAs and initial remediation, and operational runbooks with steady-state operation.

About ApTask:
ApTask is a leading global provider of workforce solutions and talent acquisition services, dedicated to shaping the future of work. As an African American-owned and Veteran-owned company, ApTask offers a comprehensive suite of services, including staffing and recruitment solutions, managed services, IT consulting, and project management. With a focus on excellence, collaboration, and innovation, ApTask provides unparalleled opportunities for professional growth and development. As a member of the ApTask team, you will have the chance to connect businesses with top-tier professionals, optimize workforce performance, and drive success across diverse industries. Join us at ApTask and be part of our mission to empower organizations to thrive while fostering a diverse and inclusive work environment.

Applicants may be required to attend interviews in person or by video conference. In addition, candidates may be required to present their current state or government issued ID during each interview.

Candidate Data Collection Disclaimer:
At ApTask, we prioritize safeguarding your privacy. As part of our recruitment process, certain Personally Identifiable Information (PII) may be requested by our clients for verification and application purposes. Rest assured, we strictly adhere to confidentiality standards and comply with all relevant data protection laws. Please note that we only collect the necessary information as specified by each client and do not request sensitive details during the initial stages of recruitment.

If you have any concerns or queries about your personal information, please feel free to contact our compliance team at [email protected].

Applicant Consent:
By submitting your application, you agree to ApTask's (www.aptask.com) Terms of Use and Privacy Policy, and provide your consent to receive SMS and voice call communications regarding employment opportunities that match your resume and qualifications. You understand that your personal information will be used solely for recruitment purposes and that you can withdraw your consent at any time by contacting us at 732-355-8000 or [email protected]. Message frequency may vary. Msg & data rates may apply.

About operations at ApTask

What this vertical looks like inside ApTask.

Operations roles at ApTask cover program management, PMO, business analysis, transformation, and change-management positions across enterprise clients. We place operators who translate strategy into delivery — PMPs, Scrum Masters, agile coaches, Six Sigma black belts, and change-management practitioners certified in Prosci or the client's preferred framework. Candidates are validated against the specific enterprise tooling the client runs (ServiceNow, Jira Portfolio, Clarity, Planview) and their prior track record in comparable-scale programs, not generic delivery experience.

How it works

What happens after you apply.

1. Verified profile
Submit your résumé and complete the ApTask identity + skills verification. We check right-to-work, background, and technical calibration once — never resell or re-verify — so future roles surface faster.
2. Recruiter calibration call
Within one business day, the recruiter who owns this requisition reviews your profile against the client's specific stack, arrangement, and start-date requirements. You'll hear back either way — no ghosting.
3. Client interview
If your profile is a fit, we present you to the hiring team. Most clients run 2-3 interview stages: hiring-manager screen, technical panel, and final. We prep you with the exact scorecard criteria before each round.
4. Offer + onboarding
On acceptance, you onboard W-2 with ApTask (contract) or direct-hire with the client (per role type). Benefits, payroll, and timesheets run through us. Your recruiter stays your point of contact for the length of the engagement.

Frequently asked

Questions candidates ask about this role.

Is the Vulnerability Management Engineer role fully remote?: Yes — this Vulnerability Management Engineer role is remote-friendly. The listing is anchored to Multiple, US for tax and payroll purposes, but the client is open to candidates who can work from anywhere the applicant-location requirements allow. Occasional travel for on-site quarterly reviews may be requested; the recruiter will confirm during your calibration call.
Is this a contract or full-time role?: This is a contract opportunity on ApTask's payroll. If selected, you will be employed by ApTask and will receive a W-2 for the duration of your assignment. During your engagement, you will be eligible for subsidized benefits, including medical, dental, vision insurance, a 401(k) plan, commuter benefits, and state-mandated paid sick leave. Your pay cycle (weekly or biweekly, as applicable) will be confirmed at the time of your offer. You'll also have a dedicated ApTask recruiter as your single point of contact throughout your assignment, providing ongoing support from onboarding through completion. Many of our contract opportunities are extended or converted to permanent positions based on business needs and performance. Your recruiter can share the client's historical extension and conversion trends during the interview process. Benefits, assignment duration, extension, conversion opportunities, and eligibility are subject to client requirements, business needs, and applicable plan terms.
What is the compensation range for this role?: The advertised range for this Vulnerability Management Engineer role is $70–$75 per hour. Where you land within the band depends on validated experience, the specific stack calibration match, and — for contract engagements — the bill-rate the client has locked in for this requisition. The recruiter will discuss the exact number during your calibration call.
How quickly does the interview process move?

More roles in this vertical

Remote · Multiple, CA

Ready to apply? Two minutes, one profile.

Your résumé routes to the recruiter who owns this requisition. Identity-verified once, matched against every future ApTask role that fits your stack.

Join talent network See all roles

Vulnerability Management Engineer

About the role

What this vertical looks like inside ApTask.

What happens after you apply.

1. Verified profile

2. Recruiter calibration call

3. Client interview

4. Offer + onboarding

Questions candidates ask about this role.