As a key member of the Vulnerability and Patch Management managed service, you will ensure the security and integrity of the client’s infrastructure. You will be responsible for performing manual rescans, validating remediation evidence, and investigating recurring findings to recommend the closure or reopening of security cases. This role requires a dedicated focus on defensible evidence analysis and hands-on scanner operation within a disciplined operational environment.
Mission
This position supports a client's infrastructure security and integrity as part of Reveald's Vulnerability and Patch Management managed service. The role is contingent on Reveald winning the underlying contract. Work involves coordinating with asset owners, application teams, and customer success to maintain defensible security postures across assigned technology lanes.
About this role
About this opening: this is a permanent position employed by Reveald, and it depends on Reveald winning the contract it is bidding for. No security clearance is required. To be confirmed: salary (depends on experience), location, work arrangement and onsite days, on-call expectations, number of hires and start date.
As a key member of the Vulnerability and Patch Management managed service, you will ensure the security and integrity of the client’s infrastructure. You will be responsible for performing manual rescans, validating remediation evidence, and investigating recurring findings to recommend the closure or reopening of security cases. This role requires a dedicated focus on defensible evidence analysis and hands-on scanner operation within a disciplined operational environment.
What you'll do
• Perform manual vulnerability rescans and investigate recurring security findings.
• Validate remediation evidence to determine if cases should be closed or reopened.
• Maintain a dedicated focus on scan operations and evidence analysis without diversion to general tasks.
• Collaborate with asset and application owners, Customer Success Managers, and testing teams to coordinate remediation.
• Produce clear runbooks and maintain an auditable case history for all actions taken.
• Manage assigned technology lanes while following disciplined change control and troubleshooting procedures.
• Escalate operational risks and identify when specialist support is required for complex issues.
• Support agreed service windows, maintenance schedules, and critical on-call responsibilities.
What you bring
• Two or more years of relevant operations experience in vulnerability management or a related field.
• Hands-on experience with vulnerability scanner operation and defensible evidence analysis.
• Recent production experience in assigned technology lanes including troubleshooting and documentation.
• Ability to distinguish between successful installation, validated remediation, and authorized closure.
• Experience managing change and recovery, including the ability to explain failed remediations and rollback procedures.
• Strong communication skills to handle unresponsive owners and resolve cross-agency change conflicts.
• A skills matrix identifying specific technology lanes you are qualified to lead, execute, or coordinate with documented evidence.
• Commitment to protecting customer data and working strictly within approved access levels.
Nice to have
• Operational Technology (OT) experience including passive findings and vendor safety plans.
• Packaging experience involving silent installers and detection logic.
• Engineering experience with controlled updates and recovery.
• Experience reconciling manual case queues or managing agency-level escalations.
Required skills
- Vulnerability scanning
- Remediation validation
- Evidence analysis
- Tenable
- Qualys
- Rapid7