Vulnerability Engineer Cloud Security Tenable

We are looking for a Vulnerability Engineer to join the Security team of a leading company in the multi-technical services and energy solutions industry.
About the role
You will assess, remediate and manage security vulnerabilities across a complex enterprise environment, with a strong focus on automation and remediation strategies to meet vulnerability SLOs. We want someone who owns the vulnerability lifecycle from detection to closure, not only someone who finds issues. You will work with international teams, so fluent communication in English is part of the job.
What you will do
Run vulnerability assessments and security scans across infrastructure, applications and systems.
Optimize the Tenable.io platform for continuous scanning and monitoring.
Analyze scan results, prioritize findings based on risk and recommend actionable remediation.
Track and update vulnerabilities in JIRA and ServiceNow.
Propose compensating controls when remediation is not immediately possible.
Coordinate with IT, DevOps, engineering teams and Application Owners to drive and verify remediation.
Maintain vulnerability metrics, dashboards and reports for technical audiences.
Perform trend analysis and share insights on the organizations security posture.
Stay current on emerging threats, vulnerabilities and best practices.
Contribute to the development and improvement of vulnerability management policies and procedures.
What we are looking for (must-have)
Vulnerability Management experience Management and follow-up of vulnerabilities from identification through closure. 23 years of hands-on experience in vulnerability management and security analysis.
Tenable experience Practical knowledge of the tool (Tenable.io or Tenable.sc), including platform administration and the related vulnerability management processes.
Cloud Security experience Experience in cloud environments is essential, along with a solid understanding of the risks and controls associated with cloud infrastructure.
End-to-end ownership You have managed vulnerabilities from start to finish:
Identification and validation
Remediation follow-up
Coordination with Application Owners and technical teams
Verification and closure
English level B2 or higher You will be communicating regularly with colleagues and stakeholders outside Chile, so you must be comfortable speaking and writing in English.
Also required
Experience in enterprise environments with complex, multi-platform infrastructures.
Hands-on experience with automation and scripting (Python, PowerShell, Bash or similar) applied to vulnerability management.
Solid understanding of common vulnerabilities (OWASP Top 10, CVE/CVSS).
Knowledge of operating systems (Windows, Linux, Unix) and network security principles.
Familiarity with compliance frameworks (PCI-DSS, HIPAA, NIST, ISO 27001).
Highly valued
Wiz Experience or knowledge of the Wiz platform will be a significant advantage. Candidates without direct Wiz experience but with solid Cloud Security and Tenable experience will also be considered.
Important considerations
We are not looking for profiles focused solely on implementing security tools.
This role is not a fit for candidates whose work consisted only of detecting vulnerabilities and handing them off to other teams without further follow-up.
Soft skills
Clear communication with technical and non-technical stakeholders, collaboration with cross-functional teams, problem-solving, adaptability, critical thinking, time management and empathy.
What we offer
Permanent contract (indefinite term)
Hybrid work model: 3 days on-site / 2 days remote
Flexible working hours
Health insurance
Annual salary adjustment based on IPC
Professional development opportunities