Vulnerability Engineer
Irvine, CA · On-site
ClifyX is a company focused on cybersecurity solutions, and they are seeking a Vulnerability Engineer to enhance their vulnerability management processes. The role involves analyzing vulnerability ...
Vulnerability Engineer
Irvine, CA · On-site
ClifyX is a company focused on cybersecurity solutions, and they are seeking a Vulnerability Engineer to enhance their vulnerability management processes. The role involves analyzing vulnerability ...
Vulnerability Engineer
Atlanta, GA · On-site
Endpoint Security & Vulnerability Management Engineer Please note: As per current corporate policy, this position may require you to be in the office up to four (4) days per week and/or as ...
Vulnerability Engineer
Atlanta, GA · On-site
Endpoint Security & Vulnerability Management Engineer Please note: As per current corporate policy, this position may require you to be in the office up to four (4) days per week and/or as ...
Endpoint Security & Vulnerability Management Engineer Please note: As per current corporate policy, this position may require you to be in the office up to four (4) days per week and/or as ...
Endpoint Security & Vulnerability Management Engineer Please note: As per current corporate policy, this position may require you to be in the office up to four (4) days per week and/or as ...
Endpoint Security & Vulnerability Management Engineer Please note: As per current corporate policy, this position may require you to be in the office up to four (4) days per week and/or as ...
Endpoint Security & Vulnerability Management Engineer Please note: As per current corporate policy, this position may require you to be in the office up to four (4) days per week and/or as ...
Vulnerability Engineer
Atlanta, GA · On-site
Endpoint Security & Vulnerability Management Engineer Please note: As per current corporate policy, this position may require you to be in the office up to four (4) days per week and/or as ...
Vulnerability Engineer
Atlanta, GA · On-site
Endpoint Security & Vulnerability Management Engineer Please note: As per current corporate policy, this position may require you to be in the office up to four (4) days per week and/or as ...
Vulnerability Engineer
Atlanta, GA · On-site
Endpoint Security & Vulnerability Management Engineer Please note: As per current corporate policy, this position may require you to be in the office up to four (4) days per week and/or as ...
Vulnerability Engineer
Atlanta, GA · On-site
Endpoint Security & Vulnerability Management Engineer Please note: As per current corporate policy, this position may require you to be in the office up to four (4) days per week and/or as ...
Vulnerability Engineer
Atlanta, GA · On-site
Endpoint Security & Vulnerability Management Engineer Please note: As per current corporate policy, this position may require you to be in the office up to four (4) days per week and/or as ...
Vulnerability Engineer
Atlanta, GA · On-site
Endpoint Security & Vulnerability Management Engineer Please note: As per current corporate policy, this position may require you to be in the office up to four (4) days per week and/or as ...
Vulnerability Engineer
Washington, DC · On-site +1
BDR is seeking a Vulnerability Engineer to join our growing team! This position will be hybrid with three (3) days a week on-site in Washington, D.C. This position requires US Citizenship with an ...
Vulnerability Engineer
Washington, DC · On-site +1
BDR is seeking a Vulnerability Engineer to join our growing team! This position will be hybrid with three (3) days a week on-site in Washington, D.C. This position requires US Citizenship with an ...
Vulnerability Engineer
Washington, DC · On-site
BDR is seeking a Vulnerability Engineer to join our growing team! This position will be hybrid with three (3) days a week on-site in Washington, D.C. This position requires US Citizenship with an ...
Quick apply
Vulnerability Engineer
Washington, DC · On-site
BDR is seeking a Vulnerability Engineer to join our growing team! This position will be hybrid with three (3) days a week on-site in Washington, D.C. This position requires US Citizenship with an ...
Vulnerability Engineer
Atlanta, GA · On-site
Endpoint Security & Vulnerability Management Engineer Please note: As per current corporate policy, this position may require you to be in the office up to four (4) days per week and/or as ...
Vulnerability Engineer
Atlanta, GA · On-site
Endpoint Security & Vulnerability Management Engineer Please note: As per current corporate policy, this position may require you to be in the office up to four (4) days per week and/or as ...
Senior Vulnerability Engineer
Erie, PA · On-site
$70 - $80/hr
The Vulnerability Engineer will work closely with infrastructure, application development, cloud, and security teams to reduce cyber risk and strengthen the organization's security posture. * The ...
Senior Vulnerability Engineer
Erie, PA · On-site
$70 - $80/hr
The Vulnerability Engineer will work closely with infrastructure, application development, cloud, and security teams to reduce cyber risk and strengthen the organization's security posture. * The ...
Senior Vulnerability Engineer
Erie, PA · On-site
$70 - $80/hr
The Vulnerability Engineer will work closely with infrastructure, application development, cloud, and security teams to reduce cyber risk and strengthen the organization's security posture. * The ...
Senior Vulnerability Engineer
Erie, PA · On-site
$70 - $80/hr
The Vulnerability Engineer will work closely with infrastructure, application development, cloud, and security teams to reduce cyber risk and strengthen the organization's security posture. * The ...
Successful vulnerability engineers thrive on challenge, are calm under pressure, and can think critically. You're Our Person If You Have: * 5-7 years experience in information security or closely ...
Successful vulnerability engineers thrive on challenge, are calm under pressure, and can think critically. You're Our Person If You Have: * 5-7 years experience in information security or closely ...
Product Vulnerability Engineer
Mclean, VA · On-site
Successful vulnerability engineers thrive on challenge, are calm under pressure, and can think critically. You're Our Person If You Have: * 5-7 years experience in information security or closely ...
Product Vulnerability Engineer
Mclean, VA · On-site
Successful vulnerability engineers thrive on challenge, are calm under pressure, and can think critically. You're Our Person If You Have: * 5-7 years experience in information security or closely ...
Product Vulnerability Engineer
Mclean, VA · On-site
Successful vulnerability engineers thrive on challenge, are calm under pressure, and can think critically. You're Our Person If You Have: * 5-7 years experience in information security or closely ...
Product Vulnerability Engineer
Mclean, VA · On-site
Successful vulnerability engineers thrive on challenge, are calm under pressure, and can think critically. You're Our Person If You Have: * 5-7 years experience in information security or closely ...
Senior Vulnerability Engineer
Reston, VA · On-site
$108K - $149K/yr
As our Senior Vulnerability Engineer, you will provide Subject Matter Expertise support to maintain Vulnerability Management Program requirements including, but not limited to, maintaining the patch ...
Quick apply
Senior Vulnerability Engineer
Reston, VA · On-site
$108K - $149K/yr
As our Senior Vulnerability Engineer, you will provide Subject Matter Expertise support to maintain Vulnerability Management Program requirements including, but not limited to, maintaining the patch ...
Senior Vulnerability Engineer
Reston, VA · On-site
$108K - $149K/yr
As our Senior Vulnerability Engineer, you will provide Subject Matter Expertise support to maintain Vulnerability Management Program requirements including, but not limited to, maintaining the patch ...
Senior Vulnerability Engineer
Reston, VA · On-site
$108K - $149K/yr
As our Senior Vulnerability Engineer, you will provide Subject Matter Expertise support to maintain Vulnerability Management Program requirements including, but not limited to, maintaining the patch ...
Senior Vulnerability Engineer
Reston, VA · On-site
$108K - $149K/yr
As our Senior Vulnerability Engineer, you will provide Subject Matter Expertise support to maintain Vulnerability Management Program requirements including, but not limited to, maintaining the patch ...
Senior Vulnerability Engineer
Reston, VA · On-site
$108K - $149K/yr
As our Senior Vulnerability Engineer, you will provide Subject Matter Expertise support to maintain Vulnerability Management Program requirements including, but not limited to, maintaining the patch ...
Product Vulnerability Engineer
Mclean, VA · On-site
Successful vulnerability engineers thrive on challenge, are calm under pressure, and can think critically. You're Our Person If You Have: * 5-7 years experience in information security or closely ...
Product Vulnerability Engineer
Mclean, VA · On-site
Successful vulnerability engineers thrive on challenge, are calm under pressure, and can think critically. You're Our Person If You Have: * 5-7 years experience in information security or closely ...
$77K - $105K/yr
As our Senior Vulnerability Engineer, you will provide Subject Matter Expertise support to maintain Vulnerability Management Program requirements including, but not limited to, maintaining the patch ...
$77K - $105K/yr
As our Senior Vulnerability Engineer, you will provide Subject Matter Expertise support to maintain Vulnerability Management Program requirements including, but not limited to, maintaining the patch ...
Vulnerability Engineer information
See salary details
$39K - $48K
3% of jobs
$48K - $56.9K
3% of jobs
$56.9K - $65.9K
4% of jobs
$65.9K - $74.8K
7% of jobs
$74.8K - $83.8K
6% of jobs
$84.5K is the 25th percentile. Wages below this are outliers.
$83.8K - $92.7K
6% of jobs
The median wage is $100.8K / yr.
$92.7K - $101.7K
21% of jobs
$101.7K - $110.6K
4% of jobs
$116.4K is the 75th percentile. Wages above this are outliers.
$110.6K - $119.6K
29% of jobs
$119.6K - $128.5K
2% of jobs
$128.5K - $137.5K
13% of jobs
$39K
$101.8K
$137.5K
How much do vulnerability engineer jobs pay per year?
As of Sep 14, 2026, the average yearly pay for vulnerability engineer in the United States is $101,752.00, according to ZipRecruiter salary data. Most workers in this role earn between $84,000.00 and $116,500.00 per year, depending on experience, location, and employer.
What is a vulnerability engineer?
A Vulnerability Engineer is a cybersecurity professional responsible for identifying, assessing, and mitigating security vulnerabilities within an organization's systems, networks, and applications. They use specialized tools to scan for weaknesses, analyze security data, and work with other IT teams to remediate risks. Their goal is to protect sensitive data and ensure compliance with industry regulations by proactively addressing potential security threats.
What are the key skills and qualifications needed to thrive as a vulnerability engineer, and why are they important?
To thrive as a Vulnerability Engineer, you need a strong understanding of cybersecurity principles, vulnerability assessment methodologies, and a background in IT or computer science. Familiarity with tools such as Nessus, Qualys, Burp Suite, and relevant certifications like OSCP or CompTIA Security+ are commonly expected. Analytical thinking, attention to detail, and effective communication are crucial soft skills for identifying risks and collaborating with teams. These skills and qualifications are vital to proactively detect, assess, and mitigate security vulnerabilities, protecting organizational assets from cyber threats.
What are some common challenges faced by vulnerability engineers when coordinating with development teams to remediate identified vulnerabilities?
One of the primary challenges Vulnerability Engineers encounter is ensuring that development teams prioritize and address vulnerabilities promptly, especially when they have competing project deadlines. Effective communication is essential to explain the risk and potential business impact of each vulnerability in terms that are understandable to non-security professionals. Additionally, aligning remediation efforts with ongoing development cycles and managing false positives can require careful negotiation and collaboration. Building strong relationships and fostering a security-first culture within the organization can significantly ease these challenges.
What is the difference between Vulnerability Engineer vs Security Analyst?
| Aspect | Vulnerability Engineer | Security Analyst |
|---|---|---|
| Certifications | OSCP, CISSP, CEH | CISSP, Security+ |
| Work Environment | Focus on identifying and fixing vulnerabilities in systems and applications | Monitor security alerts, analyze threats, and respond to incidents |
| Employer & Industry Usage | Tech companies, cybersecurity firms, large enterprises | Corporate security teams, government agencies, financial institutions |
While both roles focus on cybersecurity, Vulnerability Engineers primarily identify and remediate system vulnerabilities, whereas Security Analysts monitor and respond to security threats. Vulnerability Engineers are more technical and hands-on with system testing, while Security Analysts focus on threat detection and incident response. Both roles are essential for a comprehensive security strategy.
More about Vulnerability Engineer jobs
What states have the most Vulnerability Engineer jobs?
States with the most job openings for Vulnerability Engineer jobs include:
What are popular job titles related to Vulnerability Engineer jobs?
For Vulnerability Engineer jobs, the most frequently searched job titles are:
Vulnerability Engineer
Irvine, CA • On-site
ClifyX
• Recruiting and Staffing Services • 51 - 200 employees51 - 200 employees
Full-time
Re-posted 9 days ago
Job description
Job Summary:
ClifyX is a company focused on cybersecurity solutions, and they are seeking a Vulnerability Engineer to enhance their vulnerability management processes. The role involves analyzing vulnerability findings, automating remediation assignments, and supporting integrations and workflows.
Responsibilities:
• Analyze vulnerability findings and design rule based logic within the Avalor UVM platform to automate assignment of remediation ownership.
• Maintain and continuously refine assignment rules to achieve and sustain high assignment accuracy targets (&Client99%).
• Monitor vulnerability support intake channels (Teams, Email, ServiceNow) and manage request triage, reassignment, research, and escalation activities.
• Acknowledge and resolve vulnerability-related requests within defined SLAs, escalating to VM engineering teams via Jira as required.
• Implement low to medium complexity enhancements to vulnerability data pipelines using Python and SQL, including validations, monitoring, and automation.
• Support maintenance and enhancement of existing integrations and workflows, including APIs and Microsoft Power Automate solutions.
• Independently own and deliver assigned Jira work items with accurate estimation, status reporting, and consistent weekly throughput.
Qualifications:
Required:
• Working knowledge of Python for scripting, troubleshooting, and modifying existing data pipelines.
• Strong SQL skills for querying, transformation, and data validation.
• Experience designing and maintaining rule based logic (if/else, AND/OR conditions) for automated decisioning.
• Exposure to API integrations and data flow troubleshooting across enterprise platforms.
• Experience maintaining or enhancing Power Automate workflows and integrations with Microsoft tools such as SharePoint, Outlook, and Excel.
• Proven ability to operate in a high throughput delivery model, independently closing Jira work items with consistent execution discipline.
Company:
ClifyX provides innovative business solutions which satisfy requirements for mission-critical reliability, scalability, interoperations. Founded in 1998, the company is headquartered in South Plainfield, USA, with a team of 501-1000 employees. The company is currently Late Stage.
ClifyX is a company focused on cybersecurity solutions, and they are seeking a Vulnerability Engineer to enhance their vulnerability management processes. The role involves analyzing vulnerability findings, automating remediation assignments, and supporting integrations and workflows.
Responsibilities:
• Analyze vulnerability findings and design rule based logic within the Avalor UVM platform to automate assignment of remediation ownership.
• Maintain and continuously refine assignment rules to achieve and sustain high assignment accuracy targets (&Client99%).
• Monitor vulnerability support intake channels (Teams, Email, ServiceNow) and manage request triage, reassignment, research, and escalation activities.
• Acknowledge and resolve vulnerability-related requests within defined SLAs, escalating to VM engineering teams via Jira as required.
• Implement low to medium complexity enhancements to vulnerability data pipelines using Python and SQL, including validations, monitoring, and automation.
• Support maintenance and enhancement of existing integrations and workflows, including APIs and Microsoft Power Automate solutions.
• Independently own and deliver assigned Jira work items with accurate estimation, status reporting, and consistent weekly throughput.
Qualifications:
Required:
• Working knowledge of Python for scripting, troubleshooting, and modifying existing data pipelines.
• Strong SQL skills for querying, transformation, and data validation.
• Experience designing and maintaining rule based logic (if/else, AND/OR conditions) for automated decisioning.
• Exposure to API integrations and data flow troubleshooting across enterprise platforms.
• Experience maintaining or enhancing Power Automate workflows and integrations with Microsoft tools such as SharePoint, Outlook, and Excel.
• Proven ability to operate in a high throughput delivery model, independently closing Jira work items with consistent execution discipline.
Company:
ClifyX provides innovative business solutions which satisfy requirements for mission-critical reliability, scalability, interoperations. Founded in 1998, the company is headquartered in South Plainfield, USA, with a team of 501-1000 employees. The company is currently Late Stage.
About ClifyX
Sourced by ZipRecruiter
ClifyX is a well-established player in the IT Services sector that specializes in providing result-oriented technological solutions to a wide range of industrial verticals. Based in South Plainfield, New Jersey, ClifyX offers a comprehensive selection of IT services that include project staffing, application development, professional consulting, and other IT-based solutions. While the company's website, clifyx.com, does not divulge the exact founding date, it is clear that ClifyX has grown into a renowned name within their domain, thanks to their unwavering commitment to innovative practices. The company's mission statement revolves around harnessing the power of technology to assist their clientele in steering their respective businesses towards success.
Industry
Recruiting and staffing services
Company size
51 - 200 Employees
Headquarters location
South Plainfield, NJ, US
Year founded
1998