Conviso Inc is hiring Security Engineer. This is remote role and it comes with benefits, 401K & some accrued PTO. The Ideal Candite will have good understanding/foundation in vulnerability management, compliance support, and cloud infrastructure security.
Title: Security Engineer
Location: Remote, Washington, DC
Experience Level: 1-3 YearsKey Responsibilities Vulnerability Management
- Monitor, track, and support remediation activities for vulnerabilities identified through tools such as Nessus, Defender for Cloud, Invicti, and SonarQube.
- Deliver weekly Splunk auditable events reports.
- Lead weekly security meetings, providing updates on ongoing vulnerability and remediation efforts.
- Ensure all vulnerability related certificates remain valid and current.
- Track and verify that all software licenses are up to date. Patch & System Assurance
- After scheduled patching cycles, validate that all Virtual Machines (VMs) are operational.
- Communicate status updates to application teams and key stakeholders and coordinate testing to ensure systems function as expected. Auditing & Compliance
- Support Plan of Action and Milestones (POA&M) tracking and drive closure of outstanding items.
- Maintain and update Security Engineering checklists to ensure continuous compliance.
- Fulfill A&A (Assessment & Authorization) data requests as needed.
- Respond to FNA Security inquiries regarding vulnerabilities during Change Request review cycles. Baseline & Configuration Management
- Generate and deliver monthly baseline reports for environments, including:– Software inventories– Software end of life assessments– Ports and protocols validation– Azure infrastructure baselines– Azure VM configuration reviews Agile/Scrum Participation
- Maintain accuracy of JIRA boards by aligning stories and sub tasks with active sprint work.
- Prepare materials and updates for sprint reviews on the first day of each sprint.
Qualifications:- 1-3 years of experience in security engineering or related IT security roles.
- Hands on experience with vulnerability scanning tools (e.g., Nessus, Invicti, SonarQube).
- Familiarity with cloud security frameworks (Azure preferred).
- Working knowledge of patch management processes, compliance frameworks, and auditing practices.
- Exposure to SIEM tools (Splunk preferred).
- Experience working in Agile/Scrum environments and using tools such as JIRA.
- Strong communication skills and ability to collaborate effectively in remote teams.
