Vulnerability Assessment Automation Engineer

Vulnerability Assessment Automation Engineer About the role hiring for a large financial services client. You will build the automation behind a vulnerability assessment team in cyber threat intelligence. The goal is simple. Assess more vulnerabilities, faster, without adding people at the same rate that volume grows. What you will do Automatically pull in vulnerability disclosures and vendor advisories Match them to the organization's technology, including products, versions, configurations, and internet exposure Apply the team's risk scoring method consistently Flag vulnerabilities that need an emergency response Generate summaries and leadership reports What you bring 8+ years in engineering, with 3+ years in security automation Strong Python (or similar) and API integration skills Experience ingesting CVE and NVD data, vendor advisories, and CISA KEV feeds, and mapping them to an asset inventory or CMDB Risk scoring logic, including CVSS, EPSS, exposure, and asset criticality Experience generating reports and summaries Nice to have SOAR tools such as Cortex XSOAR, Splunk SOAR, Tines, or Torq LLM or GenAI assisted summarization ServiceNow integrations Attack surface management Cloud asset context in AWS or Azure Preferred certifications Optional: GCTI, other GIAC certifications, and cloud security certifications Technology and frameworks Python, CVE and NVD data, vendor advisories, CISA KEV feeds, asset inventory or CMDB, SOAR (Cortex XSOAR, Splunk SOAR, Tines, Torq), ServiceNow, and AWS or Azure asset context.