Vulnerability Engineer

Babel Street is the trusted technology partner for the world’s most advanced identity intelligence and risk operations. We deliver advanced AI and data analytics solutions providing unmatched, analysis-ready data regardless of language, proactive risk identification, 360-degree insights, high-speed automation, and seamless integration into existing systems. Babel Street empowers government and commercial organizations to transform high-stakes identity and risk operations into a strategic advantage.The actionable insights we deliver safeguard lives and protect critical assets around the world. Babel Street is headquartered in Reston, Virginia, with regional offices in Boston, MA and Cleveland, OH, and international offices in Australia, Canada, Israel, Japan, and the U.K. For more information, visit www.babelstreet.com.

About the role:

We are actively seeking a skilled Vulnerability and Remediation Engineer to enhance our cybersecurity efforts. This position is focused on identifying, assessing, and mitigating vulnerabilities across our IT infrastructure. The chosen candidate will leverage platforms like Qualys VMDR for vulnerability scanning, validate these findings through system reviews or direct interactions, and implement or recommend remediations using specialized patching and management tools such as Manage Engine Desktop and Kandji. Essential to this role is a comprehensive understanding of various operating systems (Unix, MacOS, Windows) and their command lines (Bash, PowerShell, Command Shell), as well as proficiency in patching tools, to effectively verify and resolve vulnerabilities.

What you will do:

Vulnerability Analysis:

· Conduct regular scans and review alerts and vulnerabilities across a range of platforms, with an emphasis on Qualys VMDR.

· Evaluate and prioritize vulnerabilities based on severity, impact, and potential risk to the organization, using an in-depth knowledge of diverse operating systems and command lines.

· Validate the existence of vulnerabilities by leveraging expertise in operating systems (Unix, MacOS, Windows) and command-line interfaces (Bash, PowerShell, Command Shell).

Remediation Strategy and Patch Management:

· Develop and implement strategic remediation for identified vulnerabilities, ensuring timely and effective resolution.

· Collaborate with IT and Development teams to streamline patch management processes, utilizing tools like Manage Engine Desktop, Kandji, etc. to reduce vulnerability exposure time.

· Document and maintain records of remediation efforts, including patch applications, affected systems, and results of post-remediation evaluations.

Threat Intelligence and Analysis:

· Stay abreast of emerging threats and vulnerabilities relevant to the organization's environment.

· Utilize threat intelligence feeds and analysis to enhance detection capabilities and improve incident response processes.

· Collaborate with internal and external stakeholders to share threat intelligence and coordinate response efforts.

Continuous Improvement:

· Stay informed about emerging security threats, vulnerabilities, and advanced mitigation techniques to continuously improve security posture.

· Recommend and integrate enhancements to the vulnerability management process, including automation and improved integration with existing security tools.

Compliance and Reporting:

· Ensure that vulnerability management practices align with established security policies, standards, and regulatory requirements.

· Prepare detailed reports on the vulnerability landscape, remediation efforts, and residual risks, and present these findings to senior management and relevant stakeholders.

· Assist in security audits and assessments by providing comprehensive documentation of vulnerability management and remediation activities.

What you will bring:

· Bachelor’s degree (preferred) in Computer Science, Information Security, or related field, with relevant certifications such as SSCP, CYSA, or GSEC preferred.

· At least 3 years of experience in vulnerability management, security operations, or related cybersecurity roles.

· Proficiency in a variety of operating systems (Unix, MacOS, Windows) and command lines (Bash, PowerShell, Command Shell), as well as in patching tools like Manage Engine Desktop, Kandji, and similar technologies.

· Demonstrated experience with vulnerability management platforms (e.g., Qualys VMDR) and a deep understanding of network security principles, technologies, and best practices.

· Strong analytical and problem-solving skills, with a detail-oriented approach to vulnerability assessment and remediation.

· Excellent communication skills, capable of effectively articulating technical information to a diverse audience of technical and non-technical stakeholders

Benefits at Babel Street (just to name a few...)

• Health Benefits: Babel Street covers 85%-100% monthly premium costs for Medical, Dental, Vision, Life & Disability insurances – for you and your family!
• Retirement Plans: Babel Street offers both a Traditional and Roth 401(K) with a very competitive match.
• Unlimited Flexible Leave: We trust our employees to manage their own time and balance their personal and work lives.
• Holidays: Babel Street provides employees with 12 paid Federal Holidays
• Tuition Reimbursement: We are committed to investing in our employees. One way we do that is with our Tuition Reimbursement Program for continuing education.

Babel Street is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. Further, Babel Street will not discriminate against applicants for inquiring about, discussing or disclosing their pay or, in certain circumstances, the pay of their co‐worker, Pay Transparency Nondiscrimination.In addition, Babel Street's policy is to provide reasonable accommodation to qualified employees who have protected disabilities to the extent required by applicable laws, regulations and ordinances where a particular employee works. Upon request, we will provide you with more information about such accommodations.