Information Security Engineer

GDS Group

. Manage processes and solutions pertaining to vulnerability management, application security, CIS benchmarks, and other security services .

Posted 10/30/2026full-timeHunt Valley • Maryland • United StatesMid-LevelSenior💰 $105,000 - $135,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in vulnerability management, application security, and risk analysis, with a strong focus on remediation activities and stakeholder communication. Proficient in utilizing vulnerability scanning tools and implementing security controls across diverse environments, including cloud and on-premises systems.

Highest-signal resume keywords

Vulnerability ManagementCloud Security (AWS, Azure, Google Cloud Platform)Vulnerability Scanning Tools (Qualys, Tanium, Bitsight)Security Certifications (Security+, CISSP, CEH, CISM)Risk Management Frameworks (ISO 27001, NIST 800-53)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ManagementApplication SecurityRisk AnalysisSecurity Controls ImplementationMetrics DevelopmentRemediation ActivitiesAsset ManagementSystem ScanningCloud EnvironmentsNetwork Security

Soft Skills

Stakeholder CommunicationProject OwnershipCollaborationCreative Problem SolvingProcess Improvement

Tools & Technologies

Vulnerability Scanning ToolsAsset Management PlatformsReporting PlatformsSecurity Tools ConfigurationCloud Platforms

Certifications & Qualifications

Security+Network+CISSPCEHCISM

Industry Keywords

CIS BenchmarksISO 27001NIST 800-53Security StandardsCompliance

Tech Stack

Tools & technologies

AzureCloudGoogle Cloud Platform

About the role

Key responsibilities & impact

Manage processes and solutions pertaining to vulnerability management, application security, CIS benchmarks, and other security services
Lead initiatives to develop and mature vulnerability management services
Act as an advocate for Information Security objectives and identify creative solutions
Drive remediation activities by understanding findings' impact and developing stakeholder communication channels
Maintain knowledge of current trends, publications, and emerging technologies in risk and vulnerability management
Identify, prioritize, communicate, and mitigate security risks across on-premises and hybrid/multi-cloud environments
Produce frequent metrics measuring vulnerability program efficacy and effectiveness
Identify business-critical systems and map data types across enterprise assets, databases, cloud environments, and applications
Work with vendors and consultants to identify appropriate tools
Enforce compliance with company policies and standards
Drive remediation related to DAST scans, security assessments, vulnerability scans, and risk management activities and tools
Configure and tune security tools to identify weaknesses
Develop and evaluate performance metrics
Design, document, and implement risk-analysis procedures and techniques
Research emerging technologies and identify adoption opportunities
Track vulnerability-management process progress and improve efficiency
Collaborate on and adhere to security engineering standards, methodologies, and sustainable processes
Collaborate with internal stakeholders, security operations, engineering, and consultants to reduce enterprise risk

Requirements

What you’ll need

Associate’s degree in IT discipline, equivalent work experience, or equivalent IT certifications
3+ years of experience with vulnerability management, system and application scanning, coordinating remediation efforts, and building partner relationships to achieve programmatic success
4+ years of experience taking ownership of project, enhancement, or other assignments and seeing the process through to completion
Experience with all the main cloud vendors (Amazon Web Service, Azure, Google Cloud Platform)
Understanding of applying security controls to operating systems, cloud environments, databases, and applications
Hands of experience using vulnerability scanning tools and driving remediation at an enterprise level (Qualys, Tanium, Bitsight, etc.)
Experience using Asset Management and Reporting Platforms
Experience creating weekly metrics for vulnerability and risk reduction reporting
Professional level security certifications preferred (e.g., Security+, Network+, CISSP, CEH, CISM)
Familiarity with security industry standards (ISO 27001, NIST 800-53 series, etc.) and best practices to implement control frameworks
Working knowledge of network and/or security technologies
Other requirements as needed
Position is not eligible for visa sponsorship, including employer sponsorship for an H-1B visa, OPT-STEM employment, etc.

Benefits

Comp & perks

Retirement plan
Life and disability insurance
Health, dental, and vision plans
Flexible spending accounts
Sick leave
Vacation time
Personal time
Parental leave
Employee stock purchase plan
Great benefits
Open-door policy
Upward mobility
Drug free workplace