Nasuni · Remote - United States ·
Remote US Security Engineer II at Nasuni who owns the day-to-day vulnerability management program across cloud, on-prem, network, and endpoint assets: scanning coverage, triage, risk-based prioritization, remediation tracking, SLAs, and reporting, plus incident response on an on-call rotation. Key tools include Rapid7 InsightVM, Wiz, and AWS.
Security Engineer II — Vulnerability Management
Location: United States — Remote
About the role
Nasuni is hiring a Security Engineer II to strengthen vulnerability management across our cloud workloads, on-premises infrastructure, network assets, and employee endpoints.
You will own the recurring operational work that turns security findings into measurable risk reduction: maintaining scanning coverage, triaging vulnerabilities, setting risk-based priorities, coordinating remediation, tracking service-level commitments, validating closure, and producing actionable reporting.
This is a hands-on vulnerability-management position. It is well suited to someone who has personally owned, shaped and operated vulnerability workflows and followed findings through remediation—not someone primarily seeking a cloud architecture, security architecture, or SOC analyst role.
You will join a well-supported security organization that includes a dedicated SecOps function responsible for most day-to-day detection and incident response. You will lead and contribute to incidents, including but not limited to, when vulnerability, asset and endpoint security, or infrastructure expertise is required. Participation in an on-call rotation is required.
Level and scope
You will independently manage defined areas of Nasuni’s vulnerability-management program within established security standards. You will make day-to-day prioritization and escalation decisions, coordinate with asset owners, and recommend improvements based on risk trends.
You will partner with senior security team members on program strategy, material risk exceptions, and broader security architecture decisions.
What you will do
Expected impact
You will improve asset and scanning coverage, make remediation priorities more actionable, strengthen SLA performance, improve closure validation, and help reduce recurring vulnerabilities through durable operating improvements.
What you will bring
Must-have qualifications
Preferred qualifications
Experience guidelines
Typically, 3–5 years of relevant security experience, including at least 2 years of direct vulnerability-management responsibility. Equivalent practical experience is valued. A relevant degree or certifications such as Security+, CySA+, or a cloud-security certification is helpful but not required.
Why work at Nasuni?
As part of our commitment to your well-being, we are pleased to offer comprehensive benefits packages to employees across the US. Benefits packages generally include:
Compensation Transparency:
In accordance with U.S. pay transparency laws, Nasuni is committed to providing visibility into compensation for all U.S.-based roles. Click HERE to view our compensation ranges by job grade. Actual compensation will be based on a variety of factors, including a candidate’s experience, skills, education, and work location.
To all recruitment agencies: Nasuni does not accept agency resumes. Please do not forward resumes to our job boards, Nasuni employees or any other company location. Nasuni is not responsible for any fees related to unsolicited resumes.
Nasuni is an equal opportunity employer. The equal employment opportunity policy at Nasuni protects employees and job applicants from discrimination on the bases of race, religion, color, sex (including pregnancy, gender identity, and sexual orientation), parental status, national origin, age, disability, family medical history or genetic information, political affiliation, military service, or other non-merit based factors. These protections extend to all management practices and decisions, including recruitment and hiring practices, appraisal systems, promotions, and training and career development programs.
This privacy notice relates to information collected (whether online or offline) by Nasuni Corporation and our corporate affiliates (collectively, “Nasuni”) from or about you in your capacity as a Nasuni employee, independent contractor/service provider or as an applicant for an employment or contractor relationship with Nasuni.
This privacy notice relates to information collected (whether online or offline) by Nasuni Corporation and our corporate affiliates (collectively, “Nasuni”) from or about you in your capacity as a Nasuni employee, independent contractor/service provider or as an applicant for an employment or contractor relationship with Nasuni.