Remote Vulnerability Analyst Jobs in Forney, TX (NOW HIRING)

Vulnerability Management Engineer

• 12-14 week assignment with potential to go permanent
• U.S. Citizenship required

We are seeking an experienced Vulnerability Management Engineer to design, build, and operationalize a mature vulnerability management program across a large, rapidly evolving enterprise environment. This is a hands-on engineering role responsible for developing sustainable processes, workflows, and operational procedures while driving enterprise-wide vulnerability remediation.

This engagement focuses on building a comprehensive vulnerability management program with ServiceNow Vulnerability Response workflow development serving as the primary deliverable. The ideal candidate has extensive experience with enterprise vulnerability management, ServiceNow Security Operations, and risk-based remediation across complex infrastructure environments.

Initial Project Focus

Upon joining, you will lead the implementation of the organization's enterprise Vulnerability Management initiative, including:

• Building a comprehensive asset inventory and identifying coverage gaps.
• Conducting a current-state vulnerability assessment.
• Developing and implementing the ServiceNow Vulnerability Response workflow.
• Establishing remediation SLAs and driving initial remediation efforts.
• Creating operational runbooks and transitioning the program into steady-state operations.

What We're Looking For
We are looking for a self-directed Vulnerability Management Engineer who thrives on building security programs from the ground up. You'll be comfortable leading enterprise vulnerability initiatives, coordinating remediation across multiple teams, and developing scalable operational processes. Success in this role requires strong technical expertise, exceptional communication skills, and the ability to operate effectively in a fast-paced, acquisition-driven environment while leveraging AI to improve security operations.

What You Will Do
Vulnerability Management Program Development

• Build and operationalize a mature vulnerability management program across a large and continuously changing enterprise asset environment.
• Reconcile and maintain an authoritative asset inventory across multiple security and identity platforms.
• Identify asset visibility and scanner coverage gaps to improve overall security posture.

Asset Inventory & Vulnerability Assessment

• Reconcile asset data across:
• • Tenable
  • CrowdStrike
  • Okta
  • Active Directory
  • Microsoft Intune
  • ServiceNow CMDB
  • Identify scanner, agent, and asset coverage gaps.
  • Aggregate and de-duplicate vulnerability findings from multiple sources.
  • Establish a baseline of the organization's current vulnerability posture.

Risk-Based Prioritization

• Enrich vulnerability data using:
• • CVSS
  • EPSS
  • CISA Known Exploited Vulnerabilities (KEV)
  • NodeZero validated-exploitable findings
  • Produce and maintain a risk-ranked vulnerability register.
  • Prioritize remediation efforts based on business risk and exploitability.

ServiceNow Vulnerability Response Engineering

• Design, build, and configure the ServiceNow Vulnerability Response workflow, including:
• Intake
• Prioritization
• Assignment
• Tracking
• Verification
• Re-scanning
• Closure
• Develop risk-based Service Level Agreements (SLAs).
• Establish exception handling and risk acceptance processes.
• Integrate workflows within ServiceNow SecOps.

Remediation & Program Operations

• Drive initial remediation efforts for the organization's highest-risk vulnerabilities in partnership with infrastructure and application owners.
• Coordinate remediation activities across multiple technical teams.
• Track remediation progress and report on key program metrics.
• Develop executive-ready reporting and dashboards.

Documentation & Operational Support

• Author operational runbooks and standard operating procedures.
• Transition the vulnerability management program into steady-state operations.
• Provide weekly project status updates and implementation progress.

AI-Driven Security Engineering

• Utilize frontier AI models such as ChatGPT Enterprise and Claude to accelerate:
• • Vulnerability analysis
  • Finding de-duplication
  • Risk prioritization
  • Reporting
  • Workflow design
  • Operational documentation
• Apply AI responsibly while following enterprise governance and security best practices.

Required Qualifications
Must-Have Skills

• Hands-on experience operating enterprise vulnerability management platforms, including:
• • Tenable
  • CrowdStrike Falcon Spotlight / Exposure Management
• Strong understanding of:
• • Vulnerability lifecycle management
  • Asset inventory reconciliation
  • Risk-based remediation
  • Enterprise security operations
• Experience prioritizing vulnerabilities using:
• • CVSS
  • EPSS
  • CISA Known Exploited Vulnerabilities (KEV)
  • Validated exploitability methodologies
• Hands-on experience building ServiceNow Vulnerability Response / SecOps workflows (required and non-negotiable).
• Experience coordinating remediation across infrastructure and application teams.
• Experience designing remediation SLAs and executive reporting.
• Proficiency using frontier AI models, including ChatGPT Enterprise and Claude, within security engineering workflows.
• Ability to work independently and drive initiatives from discovery through operational maturity.

Preferred Qualifications
Experience with the following technologies is highly desired:

• NodeZero
• CrowdStrike NG-SIEM
• ServiceNow CMDB
• Patch management platforms
• Change management processes
• CMDB reconciliation

Industry experience in:

• Insurance
• Financial Services
• Other regulated industries

Preferred certifications include:

• CISSP
• GIAC Security Certifications
• Tenable Certifications
• CrowdStrike Certifications

Equivalent hands-on experience will be considered in place of certifications.

Technology Environment

You will be supporting and working with:

• Tenable
• CrowdStrike Falcon Spotlight / Exposure Management
• CrowdStrike NG-SIEM
• NodeZero
• Okta
• Active Directory
• Microsoft Intune / MDM
• ServiceNow Vulnerability Response
• ServiceNow SecOps
• ServiceNow CMDB
• ChatGPT Enterprise
• Claude

Work Environment

• Fully remote position.
• Collaborative IT Security Engineering team operating within a SAFe Agile framework.
• ServiceNow is utilized for ITSM and Security Operations.
• Zoom is used for collaboration and team communication.
• AI-forward culture where frontier AI models are actively incorporated into engineering workflows.
• Fast-paced, acquisition-driven environment requiring flexibility, adaptability, and strong execution.

Additional Information

• All candidates are encouraged to apply, but many positions require a strict drug and background check by our customers.
• F2OnSite supports and adheres to all state laws regarding background checks.

F2OnSite is the fastest growing IT field services company in the United States, with hundreds of employee technicians in over 40 states. F2 OnSite performs service on computers, printers, point of sale systems, servers and other hardware technologies - including installations, migrations, deployments and break/fix. Learn more at F2onsite.com.

WHAT WE DO: Our focus is Hardware: Desktops, Laptops, Servers, Printers, POS systems, and LCDs. We have hundreds of team members across the US who work Onsite at customer locations - providing hardware break/fix services, migrate data, install computers, move printers, install/fix servers and POS systems. We close thousands of service calls each week, and do whatever it takes to get our customers up and running again. We specialize in all types of technology, projects, desktop support and more.