What You’ll Do:
Vulnerability Management
- Own the vulnerability management lifecycle end-to-end — scanning, prioritization, remediation tracking, reporting, and exception management.
- Deploy and maintain vulnerability scanning infrastructure, including credentialed scanning across servers, network devices, and endpoints.
- Develop risk-based prioritization frameworks that account for asset criticality, exploit availability, and business context.
- Build remediation tracking and SLA reporting processes in partnership with Infrastructure and IT teams.
- Manage vulnerability exception and risk acceptance workflows.
On-Premises Infrastructure Security
- Secure on-premises Active Directory — tiered administration model, GPO hardening, service account hygiene, privileged group management.
- Implement and maintain secure configuration baselines for Windows and Linux servers (CIS Benchmarks, DISA STIGs, or equivalent).
- Coordinate patching schedules and change management with Infrastructure, ensuring timely remediation without impacting operations.
- Conduct security assessments for new infrastructure deployments and third-party integrations.
Network & Physical Environment Security
- Implement and maintain network segmentation — VLANs, firewall policies, IDS/IPS, and access control lists.
- Secure remote access infrastructure — VPN, jump boxes, privileged access management.
- Partner with the Infrastructure team on network architecture reviews and security hardening.
- Maintain documentation of network security architecture, diagrams, and configurations.
Legacy & Manufacturing Environment Security
- Secure legacy and manufacturing floor environments that cannot be patched or upgraded — microsegmentation, compensating controls, risk acceptance documentation.
- Implement monitoring for unmanaged and OT assets — device inventory, network isolation, anomaly detection.
- Partner with Quality/Regulatory on FDA-validated system constraints and re-qualification requirements
- Drive decommission planning for end-of-life systems.
What You Bring:
- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field preferred; equivalent professional experience or in-progress degree considered.
- Industry certifications preferred: CISSP, CompTIA Security+, CySA+, GIAC (GSEC, GCSA), or equivalent.
- 4+ years of progressive experience in infrastructure security, security engineering, or related cybersecurity roles.
- Demonstrated vulnerability management experience — deployment and operation of scanning platforms (Tenable/Nessus, Qualys, or equivalent), credentialed scanning, and risk-based prioritization.
- Strong Active Directory and Windows Server security knowledge — tiered administration, GPO, service account management, domain hardening.
- Network security depth — segmentation, firewall management, IDS/IPS, VPN, and routing/switching security.
- Experience with secure configuration baselines (CIS Benchmarks, DISA STIGs) and compliance scanning.
- Medical device, healthcare, or regulated industry experience preferred.
- Strong communication and collaboration skills.
Why VB Spine?
We believe in growing talent from within. At VB Spine, you’ll get the training, mentorship, and support you need to build a strong foundation in the medical sales field. You’ll work alongside a high-performing team, gain valuable operating room experience, and take your first step toward a rewarding and meaningful career.
Compensation:
Pay for this role is competitive and based on experience, with additional factors like territory requirements, qualifications, and performance taken into account. The typical pay range for this position is $125 000 -135 000 annually, with potential for bonuses and incentives plus benefits.
VB Spine reserves the right to offer compensation outside of this listed range. Final compensation is determined on a case-by-case basis and considers a variety of factors including experience level, skillset, and market conditions.
Benefits include:
- Comprehensive health, dental, and vision insurance
- 401(k) with company match
- Paid time off (PTO) and holidays
- Ongoing training and professional development opportunities
- Opportunity to grow within a fast-paced, dynamic company