Senior Cybersecurity Engineer — Vulnerability and Threat Management

Hiring Range Minimum $136,000

Hiring Range Maximum $145,000

Employment Category Regular Full Time

Location of Position Hanover, NH

Remote Work Eligibility? Hybrid

Position Purpose

Dartmouth College seeks a Senior Cybersecurity Engineer to own and mature the institution’s vulnerability management program, integrate threat intelligence into vulnerability prioritization and defensive operations, and leverage AI to accelerate both disciplines. This role is responsible for the full vulnerability management lifecycle — from asset discovery and scanning through risk-rated prioritization, remediation coordination, and executive reporting — enriched by threat intelligence that ties vulnerability data to real-world adversary activity.

What You’ll Join

Dartmouth’s cybersecurity program is in an active investment and maturation phase under new CISO leadership. You won’t be slotting into a static operation — you’ll be helping build it. The team values technical depth, clear communication, and pragmatic risk management over checkbox compliance.

Required Qualifications

• Bachelor’s degree in computer science, cybersecurity, information systems, or a related field — or equivalent professional experience.
• 5+ years of hands-on cybersecurity engineering experience, with at least 3 years directly managing or operating a vulnerability management program.
• Experience building vulnerability management or threat intelligence programs from early maturity.
• Deep working knowledge of enterprise vulnerability scanning platforms (e.g., Tenable, Qualys, Rapid7).
• Experience consuming and operationalizing threat intelligence from commercial platforms, ISACs, and open-source feeds.
• Experience with developing vulnerability management API integrations and automations.
• Demonstrated ability to drive remediation with stakeholders outside your direct reporting chain.
• Solid understanding of CVSS scoring, EPSS, KEV catalog usage, and risk-based prioritization.
• Strong written and verbal communication skills.

Preferred Qualifications

• Experience in higher education, healthcare, or other environments with decentralized IT governance.
• Working knowledge of industry leading EDR, SIEM and Log Management platforms.
• Hands-on experience applying AI/ML tools to vulnerability management or threat intelligence workflows.
• Familiarity with AI-specific threat vectors and compliance frameworks relevant to research universities.
• Experience with threat intelligence platforms (TIPs), STIX/TAXII, and MITRE ATT&CK framework mapping.
• Relevant certifications: GEVA, GCIH, GCTI, CTIA, CISSP, or equivalent.

Key Accountabilities

Vulnerability Management Program Ownership (20%) — Owns the end-to-end vulnerability management lifecycle including asset inventory, scanning, prioritization, remediation tracking, and metrics reporting.

Threat Intelligence Integration (20%) — Consumes, analyzes, and operationalizes threat intelligence and open-source feeds to inform vulnerability prioritization and defensive posture.

Cross-Functional Remediation Coordination (20%) — Drives remediation outcomes with system administrators, application owners, research computing teams, and third-party vendors.

Reporting & Governance (20%) — Produces recurring vulnerability posture and threat landscape reports for the CISO, CIO, and institutional leadership.

Continuous Improvement (20%) — Integrates vulnerability management data with cybersecurity tooling and evaluates tooling enhancements.