Security Engineer

Conviso Inc. is hiring a Security Engineer for a remote role based in Washington, DC. The role supports vulnerability management, cloud infrastructure security, patch and system assurance, auditing and compliance, baseline configuration management, and Agile/Scrum activities.

Responsibilities:

• Monitor, track, and support remediation activities for vulnerabilities identified through tools such as Nessus, Defender for Cloud, Invicti, and SonarQube
• Deliver weekly Splunk auditable events reports
• Lead weekly security meetings, providing updates on ongoing vulnerability and remediation efforts
• Ensure all vulnerability related certificates remain valid and current
• Track and verify that all software licenses are up to date
• After scheduled patching cycles, validate that all Virtual Machines (VMs) are operational
• Communicate status updates to application teams and key stakeholders and coordinate testing to ensure systems function as expected
• Support Plan of Action and Milestones (POA&M) tracking and drive closure of outstanding items
• Maintain and update Security Engineering checklists to ensure continuous compliance
• Fulfill A&A (Assessment & Authorization) data requests as needed
• Respond to FNA Security inquiries regarding vulnerabilities during Change Request review cycles
• Generate and deliver monthly baseline reports for environments, including:

– Software inventories

– Software end of life assessments

– Ports and protocols validation

– Azure infrastructure baselines

– Azure VM configuration reviews

• Maintain accuracy of JIRA boards by aligning stories and sub tasks with active sprint work
• Prepare materials and updates for sprint reviews on the first day of each sprint

Requirements:

• 1-3 years of experience in security engineering or related IT security roles
• Hands on experience with vulnerability scanning tools (e.g., Nessus, Invicti, SonarQube)
• Working knowledge of patch management processes, compliance frameworks, and auditing practices
• Experience working in Agile/Scrum environments and using tools such as JIRA
• Strong communication skills and ability to collaborate effectively in remote teams
• Familiarity with cloud security frameworks (Azure preferred)
• Exposure to SIEM tools (Splunk preferred)