Information Security Engineer II

About the Role

MetroSys is seeking a skilled Information Security Engineer II to support and lead efforts around vulnerability management within a dynamic, enterprise-scale environment. This individual will be instrumental in identifying and addressing security vulnerabilities across systems, networks, and applications. The ideal candidate brings a deep understanding of vulnerability scanning tools, remediation prioritization, and collaborative risk mitigation strategies.

You will work closely with cross-functional teams to enhance the organization's security posture and help ensure compliance with industry standards. If you thrive in fast-paced environments and are passionate about cybersecurity, this is an exciting opportunity to grow and make an impact.Key Responsibilities

• Lead the end-to-end vulnerability management lifecycle : scanning, analysis, prioritization, reporting, and remediation tracking.
• Perform regular vulnerability assessments and support remediation efforts in collaboration with infrastructure and application teams.
• Track and assess emerging threats and zero-day vulnerabilities using vendor bulletins and threat intelligence feeds.
• Generate reports and dashboards to communicate risk posture and mitigation progress to technical and executive stakeholders.
• Maintain and optimize vulnerability scanning tools to ensure full visibility and accurate detection across the environment.
• Assist in security incident response involving known or suspected exploited vulnerabilities.
• Support regulatory and compliance audits (e.g., PCI, NIST, HIPAA ) by providing documentation and metrics.
• Continuously improve processes, documentation, and tooling in the vulnerability management program.

Qualifications