# Security Engineer II - Cloud & Vulnerability Management

**Company:** [Nasuni](https://hotfix.jobs/companies/nasuni)
**Location:** Remote
**Role:** Security Engineering
**Experience:** 3+ years
**Skills:** Wiz, Rapid7 Insightvm, AWS, Azure, GCP, Qualys, Tenable, Cvss, Cve, Cis Benchmarks
**Posted:** 2026-06-15

> Security Engineer II focused on vulnerability management, asset visibility, and cloud security across AWS, Azure, and GCP. Owns vulnerability lifecycle processes using Wiz and Rapid7, drives remediation with engineering teams, and supports incident response.

## Job Description

## Asset & Vulnerability Management
- Own day-to-day execution of vulnerability management processes and tooling across cloud infrastructure (Wiz), on-premises and network assets (Rapid7), while contributing to ongoing program improvements.
- Support the maintenance of a current, accurate asset inventory across cloud workloads, physical infrastructure, network devices, and employee endpoints.
- Manage the full vulnerability lifecycle, including identification, triage, prioritization, remediation coordination, and validation.
- Partner with Engineering, SRE, and IT/Infrastructure teams to drive remediation activities.
- Produce clear, actionable vulnerability reporting for Engineering and IT/Infrastructure stakeholders and security leadership.
- Track remediation SLAs, identify patterns in recurring weaknesses, and recommend systemic improvements to reduce exposure.
- Contribute to patch management coordination efforts and support secure configuration baseline reviews across key asset classes.
- Maintain visibility and inventory accuracy across cloud, endpoint, network, and infrastructure assets in partnership with IT/Infrastructure teams.

## Cloud and Infrastructure Security
- Monitor cloud security posture via Wiz across AWS, Azure, and GCP environments — identifying misconfigurations, high-risk exposures, and policy violations.
- Support secure configuration of cloud workloads, network controls, IAM, and infrastructure components in collaboration with engineering and SRE teams.
- Identify and escalate configuration drift, excessive permissions, and security gaps in cloud infrastructure.
- Provide security input on infrastructure changes and support security reviews as needed.

## Incident Response
- Support security incidents where infrastructure, asset, or vulnerability context is needed.
- Independently manage and investigate moderate-severity security incidents within your domain; conduct root cause analysis and contribute to post-incident reviews.
- Maintain and improve documentation and runbooks for asset, vulnerability, and endpoint-related incident response procedures.
- Support additional incident response efforts as needed.

## Compliance and Documentation
- Support internal and external evidence collection and control documentation for within your areas of ownership.
- Maintain accurate records of scanning activity, remediation outcomes, and asset coverage for audit readiness.
- Contribute to security awareness initiatives and help communicate security expectations around patch and configuration hygiene to engineering teams.

## Growth and Collaboration
- Share knowledge and support team development through collaboration and peer guidance.
- Identify operational gaps and recommend practical improvements to strengthen security posture and program effectiveness.
- Leverage AI-assisted tools to improve security analysis, vulnerability triage, reporting, and operational workflows while validating outputs and maintaining accountability for decisions.

## What You Will Bring
**Experience**
- 3–6 years of experience in security engineering, cloud security, vulnerability management, or a closely related role.
- Hands-on experience managing vulnerability scanning or asset management programs in a cloud or hybrid environment.
- Experience coordinating remediation efforts across Engineering, Infrastructure and/or IT teams.
- Experience prioritizing vulnerabilities using risk-based methodologies and business context.
- Experience using AI-enabled tools to improve operational efficiency, analysis, investigation, or reporting while applying appropriate validation and security controls.

**Skills**
- Experience with cloud security platforms, ideally including Wiz or a comparable CSPM tool; familiarity with AWS, Azure, or GCP security fundamentals.
- Hands-on experience with vulnerability management tools such as Rapid7 InsightVM, Qualys, Tenable, or equivalent.
- Working knowledge of network protocols, network security fundamentals, and infrastructure security concepts (TCP/IP, firewall logic, segmentation).
- Familiarity with secure configuration standards such as CIS Benchmarks and common vulnerability frameworks (CVSS, CVE).
- Strong written and verbal communication skills. Able to translate vulnerability findings into clear, prioritized guidance for cross-functional partners.
- Ownership mindset: you follow through on commitments, track your own work, and raise blockers early.
- Collaborative and reliable partner across engineering, IT/infrastructure, and security teams.

**Education and Certifications**
- Bachelor's degree in Information Security, Computer Science, or a related field; or equivalent practical experience.
- Certifications preferred: CompTIA Security+, AWS Security Specialty, CySA+, or equivalent.

## Similar roles

- [Security Program Manager](https://hotfix.jobs/jobs/e7f7fcaf-1979-4194-9131-83689809fe47) - Forus - New York, NY
- [Safeguards Enforcement Analyst, Account Takeover & Credential Abuse](https://hotfix.jobs/jobs/31f5d0ec-9b31-4419-a4b1-2e826ec7a358) - Anthropic - San Francisco, CA - $245k – $285k/yr
- [Application Security Engineer](https://hotfix.jobs/jobs/d240253e-6098-4419-8f04-aaf793f42c03) - Zocdoc - Remote - $100k – $140k/yr
- [Detection & Mitigation Engineer](https://hotfix.jobs/jobs/61def9c4-f4a5-41a5-99c6-579a61033a73) - Cloudflare
- [Security & Compliance Operations Manager](https://hotfix.jobs/jobs/90ac6643-526f-4aeb-bb4f-d71bc1af1fcd) - Mintlify - San Francisco, CA - $120k – $180k/yr

**Apply:** https://hotfix.jobs/jobs/10c0bd8a-459f-4b73-b03a-171160fffb1d
**Canonical:** https://hotfix.jobs/jobs/10c0bd8a-459f-4b73-b03a-171160fffb1d