Security Engineer

Conviso Inc is hiring Security Engineer. This is remote role and it comes with benefits, 401K & some accrued PTO. The Ideal Candite will have good understanding/foundation in vulnerability management, compliance support, and cloud infrastructure security.

Title: Security Engineer

Location: Remote, Washington, DC

Experience Level: 1-3 Years

Key Responsibilities

Vulnerability Management

• Monitor, track, and support remediation activities for vulnerabilities identified through tools such as Nessus, Defender for Cloud, Invicti, and SonarQube.

• Deliver weekly Splunk auditable events reports.

• Lead weekly security meetings, providing updates on ongoing vulnerability and remediation efforts.

• Ensure all vulnerability related certificates remain valid and current.

• Track and verify that all software licenses are up to date.

Patch & System Assurance

• After scheduled patching cycles, validate that all Virtual Machines (VMs) are operational.

• Communicate status updates to application teams and key stakeholders and coordinate testing to ensure systems function as expected.

Auditing & Compliance

• Support Plan of Action and Milestones (POA&M) tracking and drive closure of outstanding items.

• Maintain and update Security Engineering checklists to ensure continuous compliance.

• Fulfill A&A (Assessment & Authorization) data requests as needed.

• Respond to FNA Security inquiries regarding vulnerabilities during Change Request review cycles.

Baseline & Configuration Management

• Generate and deliver monthly baseline reports for environments, including:

– Software inventories

– Software end of life assessments

– Ports and protocols validation

– Azure infrastructure baselines

– Azure VM configuration reviews

Agile/Scrum Participation

• Maintain accuracy of JIRA boards by aligning stories and sub tasks with active sprint work.

• Prepare materials and updates for sprint reviews on the first day of each sprint.

Qualifications

• 1-3 years of experience in security engineering or related IT security roles.

• Hands on experience with vulnerability scanning tools (e.g., Nessus, Invicti, SonarQube).

• Familiarity with cloud security frameworks (Azure preferred).

• Working knowledge of patch management processes, compliance frameworks, and auditing practices.

• Exposure to SIEM tools (Splunk preferred).

• Experience working in Agile/Scrum environments and using tools such as JIRA.

• Strong communication skills and ability to collaborate effectively in remote teams.