ZipRecruiter

Log In

1

Vulnerability Management Automation Engineer Jobs

nLeague

Vulnerability Management Engineer

Atlanta, GA · On-site

Vulnerability Management Engineer Client: ATL - AIM General Location: 55 Trinity Avenue, Suite G700 ... Tooling & Automation · Operate and tune vulnerability scanning and endpoint management tools (e.g ...

Group1001

Senior Vulnerability Management Engineer

$190K/yr

Hands-on experience engineering, integrating, and optimizing for automation of security platforms ... of vulnerability management and systems engineering. Compensation: Our compensation reflects the ...

FIRST MERCHANTS

Security Automation Engineer

TX · Remote

Integrate vulnerability scanning tools, ticketing systems, and change management platforms into ... aging, and automation coverage. * Identify recurring remediation failures and engineer durable ...

FIRST MERCHANTS

Security Automation Engineer

KY · Remote

Integrate vulnerability scanning tools, ticketing systems, and change management platforms into ... aging, and automation coverage. * Identify recurring remediation failures and engineer durable ...

next page

Showing results 1-20

All JobsVulnerability Management Automation Engineer Jobs

Vulnerability Management Automation Engineer information

See salary details

$37K

$107.1K

$163K

How much do vulnerability management automation engineer jobs pay per year?

As of Jul 12, 2026, the average yearly pay for vulnerability management automation engineer in the United States is $107,126.00, according to ZipRecruiter salary data. Most workers in this role earn between $86,500.00 and $123,500.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a Vulnerability Management Automation Engineer, and why are they important?

To thrive as a Vulnerability Management Automation Engineer, you need expertise in cybersecurity, scripting languages (such as Python or PowerShell), and a strong understanding of vulnerability assessment methodologies, often supported by a degree in computer science or information security. Familiarity with vulnerability scanning tools (like Nessus or Qualys), security information and event management (SIEM) systems, and certifications such as CISSP or CEH are typically required. Strong problem-solving skills, attention to detail, and effective communication help you identify risks and collaborate with cross-functional teams. These skills are crucial for proactively identifying, automating the remediation of security weaknesses, and protecting organizational assets from cyber threats.

What does a Vulnerability Management Automation Engineer do?

A Vulnerability Management Automation Engineer designs, develops, and maintains automated solutions to identify, assess, and remediate security vulnerabilities within an organization's systems and networks. They work closely with security and IT teams to streamline vulnerability scanning, reporting, and patch management processes. Their goal is to reduce manual work, improve efficiency, and ensure timely mitigation of security risks by leveraging automation tools and scripting. This role requires strong technical skills in cybersecurity, automation technologies, and familiarity with vulnerability management platforms.

What is the difference between Vulnerability Management Automation Engineer vs Vulnerability Analyst?

AspectVulnerability Management Automation EngineerVulnerability Analyst
CertificationsCompTIA Security+, CISSP, or similarCompTIA Security+, GIAC, or similar
Work EnvironmentFocus on automation tools, scripting, and security systemsFocus on vulnerability assessment, analysis, and reporting
Industry UsageIT security teams, cybersecurity firms, large enterprisesSecurity operations centers, IT departments, consulting firms

The Vulnerability Management Automation Engineer primarily develops and maintains automation tools to streamline vulnerability detection and remediation, utilizing scripting and security platforms. In contrast, the Vulnerability Analyst conducts manual assessments, analyzes vulnerabilities, and reports findings. Both roles are essential in cybersecurity but differ in technical focus and daily tasks.

What engineer makes $500,000 a year?

A Vulnerability Management Automation Engineer typically does not earn $500,000 annually; such high salaries are more common in executive or specialized roles like cybersecurity directors or senior security architects. Compensation depends on experience, certifications, and the company's size and industry, with top-tier professionals in cybersecurity earning high six-figure salaries. Most engineers in this field earn between $80,000 and $150,000 per year, with higher salaries possible in senior or managerial positions.

What is the highest salary for automation engineer?

The highest salaries for automation engineers, including those specializing in vulnerability management automation, can exceed $150,000 annually, especially for senior roles with advanced skills in scripting, security tools, and cloud platforms. Compensation varies based on experience, certifications, industry, and location, with top earners often working in cybersecurity or enterprise environments.

What are some common challenges faced by Vulnerability Management Automation Engineers when integrating automated tools into existing security workflows?

A common challenge for Vulnerability Management Automation Engineers is ensuring that automated tools seamlessly integrate with legacy systems and current security processes without causing disruptions. Balancing automation efficiency with accuracy is crucial, as automated scans can sometimes generate false positives or miss context-specific vulnerabilities. Additionally, coordinating with cross-functional teams, such as IT and DevOps, is essential to align remediation efforts and establish clear communication channels. Staying updated with the latest threat landscapes while continuously refining automation scripts also presents an ongoing challenge.

Will AI replace automation engineer?

AI can automate many tasks within a vulnerability management automation engineer's role, such as vulnerability scanning and report generation. However, human oversight, critical thinking, and decision-making remain essential for managing complex security threats and implementing effective security strategies. Automation engineers will continue to adapt by integrating AI tools into their workflows to improve efficiency and accuracy.

What is vulnerability management automation?

Vulnerability management automation involves using tools and scripts to identify, prioritize, and remediate security vulnerabilities in an organization's systems automatically. For a Vulnerability Management Automation Engineer, proficiency with vulnerability scanning tools, scripting languages, and security frameworks is essential to streamline the vulnerability lifecycle and improve security posture.
More about Vulnerability Management Automation Engineer jobs
What job categories do people searching Vulnerability Management Automation Engineer jobs look for? The top searched job categories for Vulnerability Management Automation Engineer jobs are:
Vulnerability Management Automation Engineer jobs near you
Infographic showing various Vulnerability Management Automation Engineer job openings in the United States as of July 2026, with employment types broken down into 95% Full Time, 2% Part Time, and 3% Contract. Highlights an 82% Physical, 5% Hybrid, and 13% Remote job distribution, with an average salary of $107,126 per year, or $51.5 per hour.

Vulnerability Management Engineer

nLeague

Atlanta, GA • On-site

Contractor

Re-posted 29 days ago

Job description

Job ID: 65214

Position: Vulnerability Management Engineer

Client: ATL - AIM General

Location: 55 Trinity Avenue, Suite G700   Atlanta,  Georgia    30303-0000

Duration:07+ Months

Position Summary

The Vulnerability Management Engineer is responsible for assessing, managing, and reducing security vulnerabilities across enterprise server and workstation environments. This role will perform scheduled vulnerability scans, evaluate risks, recommend remediation plans, support patch cycles, and develop reporting that improves the organization’s security maturity.

The ideal candidate has deep hands-on experience with enterprise patch management, security baselines, vulnerability scanning tools, scripting and remediation across Windows and/or Linux platforms.

Key Responsibilities

Vulnerability Identification & Analysis

· Perform recurring vulnerability scans for servers and workstation environments.

· Analyze scan results to identify actionable risks, false positives, and system exposure levels.

· Prioritize vulnerabilities based on industry frameworks (CVSS, KEV, CISA, etc.).

· Coordinate with application owners for patching and remediation scheduling.

Patch & Remediation Support

· Partner with server and desktop teams to support monthly and quarterly patching cycles.

· Provide technical guidance on workarounds, hotfixes, or remediate configuration issues.

· Assist in validating remediation success post-deployment.

· Help refine patch and configuration baselines for repeatability and security.

Reporting & Metrics

· Develop weekly, monthly, and quarterly dashboards on:

  • Remediation progress
  • Aging vulnerabilities
  • SLA/KPI compliance tracking
  • Platform-level trends

· Report critical vulnerabilities and escalating risks to leadership as needed.

Tooling & Automation

· Operate and tune vulnerability scanning and endpoint management tools (e.g., Qualys, Microsoft Defender, Intune, PatchMyPC, SCCM, Azure Update Manager, etc.).

· Recommend configuration improvements, automation, and scanning optimizations.

· Assist in integrating scan results into ticketing or workflow tools such as ServiceNow or Jira.

Security Standards & Compliance

· Ensure systems adhere to organization security policies, CIS benchmarks, NIST guidance, and other relevant frameworks.

· Help improve patching and vulnerability management SOPs, runbooks, and governance processes.

· Support internal or external audit and compliance reporting requirements.

Required Qualifications

· 3–7 years’ experience in vulnerability management, patch management, or endpoint/server security operations.

· Demonstrated technical proficiency with:

  • Windows Server and Windows desktop platforms
  • Patch deployment and configuration management

· Experience operating one or more security scanning platforms (e.g. Qualys, Defender, Azure Update Manager, PatchMyPC, etc.).

· Ability to analyze scan output, identify false positives, and communicate meaningful remediation guidance.

· Strong understanding of:

  • CVEs, CVSS scoring, and exploitability assessments
  • Common ransomware and threat vectors targeting enterprise endpoints

Preferred Experience

· Experience in mixed operating system environments (Windows and Linux).

· Familiarity with:

  • Microsoft Intune and/or SCCM
  • Azure Update Manager
  • Azure Arc
  • ServiceNow
  • CIS or NIST standards

· Ability to create automation scripts (PowerShell, Bash, Python, or similar).

· Experience working in enterprise or government environments.

Soft Skills

· Strong written and verbal communication.

· Ability to translate technical risk into business impact.

· Comfortable working independently and making data-based recommendations.

· Able to coordinate across multiple IT and security teams.