We are seeking a Mobile Vulnerability Management & Configuration Compliance Engineer to design, validate, and operationalize automated vulnerability scanning and configuration compliance capabilities for enterprise-issued iOS/iPadOS and Android devices.
Key Responsibilities
- Define PoC scope, success criteria, and test plans for mobile vulnerability scanning using agent-based, agentless, MDM-integrated, and API-driven approaches.
- Evaluate vulnerability management tools based on OS/app coverage, detection accuracy, scalability, device impact, privacy, and reporting.
- Conduct pilots across representative mobile device populations and validate vulnerability detection, configuration compliance, and integration capabilities.
- Integrate mobile security solutions with Intune, Workspace ONE, Jamf, SIEM, ITSM, and CMDB platforms.
- Produce PoC findings, risk analysis, cost/benefit analysis, architecture decisions, and go/no-go recommendations.
- Develop and manage the mobile vulnerability lifecycle, including discovery, assessment, prioritization, remediation, validation, and reporting.
- Establish mobile-specific risk and severity scoring based on exposure, device role, application risk, and compliance impact.
- Coordinate remediation with endpoint engineering, mobility administrators, application owners, and operations teams.
- Develop and maintain security baselines for iOS/iPadOS and Android.
- Translate security requirements into enforceable policies covering encryption, authentication, OS updates, application controls, certificates, VPN/Wi-Fi security, and logging.
- Implement compliance monitoring, configuration drift detection, and automated/semi-automated remediation.
- Develop automation scripts and APIs to normalize, enrich, and process vulnerability findings.
- Support change management and provide technical guidance and training to operations teams.
- Partner with Information Security and Compliance teams to ensure alignment with regulatory requirements, including NYDFS.
Required Skills
- 8–10 years of overall IT/cybersecurity experience.
- 8–10 years of experience in vulnerability management, endpoint security, mobile security, or configuration compliance.
- Strong experience with enterprise iOS/iPadOS and Android security and compliance.
- Experience with vulnerability management platforms such as Qualys, Rapid7, Tenable, or equivalent.
- Hands-on experience with Intune, Workspace ONE, or Jamf.
- Experience integrating security platforms with SIEM, ITSM, and CMDB systems.
- Strong understanding of vulnerability management, risk assessment, security baselines, compliance monitoring, and remediation.
- Experience with automation, scripting, APIs, and security data normalization.
- Strong understanding of cybersecurity governance, compliance, and enterprise security controls.
Preferred Certifications
- CompTIA Security+ / CySA+
- GIAC GSEC / GMON or related certifications
- Qualys, Rapid7, Tenable, or equivalent platform certifications
- CISSP, CISM, or CCSP
- ITIL Foundation