Nasuni
Security Engineer II - Cloud & Vulnerability Management
Remote - United States · Mid · Contract
Sponsorship not specifiedDetected 10 days ago
AWSSite Reliability EngineeringCybersecurityNetwork SecurityOnboardingLeadership
Stay score
odds of building a lasting career here
37Risky
Cap-exempt (no lottery)0
Sponsors this role80
Entry-level history0
PERM / green-card track0
Lottery odds40
Fits your clock70
Thin sponsorship signal and lottery-bound. A low-probability bet with your clock running. Prioritize cap-exempt roles and proven entry-level sponsors first.
Lottery odds assume a STEM candidate.
Personalize to your clock →Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- Nasuni is hiring a Security Engineer II to strengthen vulnerability management across our cloud workloads, on-premises infrastructure, network assets, and employee endpoints.
- This is a hands-on vulnerability-management position.
- It is well suited to someone who has personally owned, shaped and operated vulnerability workflows and followed findings through remediation-not someone primarily seeking a cloud architecture, security architecture, or SOC analyst role.
Responsibilities
- Maintain accurate visibility into servers, network devices, endpoints, cloud workloads, and other in-scope assets by reconciling scanner, endpoint, cloud, and inventory data.
- Partner with Engineering, SRE, IT, and Infrastructure teams to assign owners, agree on remediation plans, manage blockers, and verify that risk has been reduced.
- Maintain runbooks, evidence, scan records, and remediation documentation for operational continuity and audit readiness.
Requirements
- Experience with vulnerability discovery, triage, risk-based prioritization, remediation coordination, and closure validation.
- Practical experience with a platform such as Rapid7 InsightVM, Tenable, Qualys, or equivalent.
- You will lead and contribute to incidents, including but not limited to, when vulnerability, asset and endpoint security, or infrastructure expertise is required.
- Participation in an on-call rotation is required.
Nice to have
- Experience with Rapid7 InsightVM.
- Experience using Wiz or another CSPM platform for cloud workload vulnerability context.
- Experience reconciling scanner data with CMDB, endpoint, cloud inventory, or ticketing systems.
- Familiarity with CIS Benchmarks, CISA Known Exploited Vulnerabilities, EPSS, and risk-exception workflows.
- Scripting, API, workflow-automation, or security-reporting experience.
- Ideal differentiators
- Experience across cloud, on-premises, network, and endpoint assets.
- Experience creating repeatable, securely validated AI-assisted security workflows.
Compensation
- In accordance with U.S. pay transparency laws, Nasuni is committed to providing visibility into compensation for all U.S.-based roles.
- Click HERE to view our compensation ranges by job grade.
- Actual compensation will be based on a variety of factors, including a candidate's experience, skills, education, and work location.
Benefits
- "Take What You Need" paid time off policy
- Comprehensive health, dental and vision plans
- Company-paid life and disability insurance
- 401(k) and Roth IRA retirement plan
- Wide array of wellbeing offerings
- Track remediation SLAs, exceptions, recurring weaknesses, and coverage gaps
- Flexible remote work policy
- Free on-site fitness centers and stocked kitchens in select
Company info
- Lead and support security incidents as part of an on-call rotation.
Equal opportunity
- Nasuni is an equal opportunity employer.
This listing is sourced directly from Nasuni's careers page and normalized into a canonical job model.