Skip to main content

Mutual Opportunities

Smiling Women

Vulnerability Management and Configuration Assurance Analyst

Springfield, Massachusetts; Boston, Massachusetts; New York, New York
Job Category Technology ID R19318
Apply Now
The Boston Globe: Top Places to Work 2024 Massachusetts

Thank you to our employees for voting us one of the top places to work in Massachusetts for five consecutive years!

Overview

A career with us means you’ll work alongside exceptional people and be empowered to reach your professional and personal goals. Our employees are at the foundation of what enables MassMutual to deliver on our purpose to help people secure their futures and protect the ones they love.

We embrace the idea that we all are stronger and better through our support for one another. We strive to create a culture where employees feel valued and are celebrated for who they are.

People working together
Roger Crandall
Roger CrandallCEO
“Since our founding in 1851, mutuality has put our policyowners at the center of everything we do. At our core, we’re a company of people helping people in their time of need, and that spirit extends to the culture we’ve built at our company. Our employees support and rely on each other each day, collaborating to deliver the best solutions for our customers and help millions more secure their future and protect the ones they love.”

Job Description

The Opportunity

We are seeking an experienced Vulnerability Management and Configuration Assurance Engineer to join our Vulnerability Management and Configuration Assurance team. The ideal candidate will have a deep understanding of security principles, vulnerability management and secure baseline configuration monitoring and designing, implementing, and optimizing vulnerability assessment solutions for MassMutual. As an advanced-level engineer, you will collaborate with cross-functional teams to ensure the security posture of our organization meets industry standards and regulatory requirements.

The Team

The Vulnerability Management and Configuration Assurance (VMCA) team is responsible for identifying, assessing, prioritizing, reporting, and continuous monitoring of vulnerabilities and configuration baseline deficiencies within our organization’s infrastructure, applications, and systems. Our team plays a critical role in maintaining the security posture of the company by proactively managing vulnerabilities that could be exploited by attackers.

VMCA is motivated by a shared sense of responsibility to protect the organization’s assets and reputation by knowing our work directly mitigates security threats and prevents potential breaches, strong collaboration with other security and IT teams, continuous learning, innovation, and problem-solving. The culture of VMCA consists of proactive and preventative mindsets, collaboration, cross-disciplinary communication, accountability, ownership, agility, adaptability, inclusivity, knowledge sharing, and transparency.

The Impact:

Your key responsibilities will consist of the following to ensure digital assets are resilient against emerging threats, reducing potential financial and reputational damage from security incidents.

Vulnerability Management

  • Lead the design, implementation, and continuous improvement of the enterprise vulnerability management program.

  • Hands on experience using automated scanning tools (e.g., Qualys, Tenable, Rapid7, Wiz) to identify, assess, report, and track vulnerabilities detected on operating systems, databases, network devices, mobile devices, and cloud services.

  • Perform advanced vulnerability assessments across on-premises, cloud, containerized, and hybrid environments.

  • Analyze vulnerability scan results, prioritize findings based on risk, exploitability, and business impact.

  • Integrate threat intelligence and MITRE ATT&CK mapping to contextualize vulnerabilities and enhance prioritization.

  • Collaborate with infrastructure and business information security officers (BISO) teams to drive timely remediation and mitigation.

  • Identify and recommend compensating controls when immediate remediation is not feasible.

  • Develop and maintain metrics and dashboards to report on vulnerability trends, remediation progress, and risk posture.

Configuration Assurance

  • Utilize automated compliance tools to assess and validate configuration compliance for operating systems, databases, network devices, and cloud services.

  • Partner with IT and engineering teams to remediate configuration drift and ensure continuous compliance.

  • Map configuration assurance controls to regulatory frameworks (e.g., NIST, CIS, ISO 27001, PCI-DSS, HIPAA).

  • Maintain documentation of configuration standards and exceptions.

Data Analytics & Visualization

  • Leverage data analytics to identify trends, anomalies, and risk concentrations across vulnerability and configuration data.

  • Build and maintain dashboards and visualizations using tools such as Tableau, etc.

  • Present actionable insights to technical and executive stakeholders to support risk-based decision-making.

Tooling & Automation

  • Develop scripts and automation workflows to streamline scanning, reporting, and remediation tracking.

  • Integrate vulnerability and configuration data into SIEM, GRC, and ticketing systems.

Governance & Reporting

  • Provide executive-level reporting and risk analysis to support strategic decision-making.

  • Participate in internal and external audits, ensuring evidence of vulnerability and configuration assurance controls.

  • Stay current with emerging threats, vulnerabilities, and security technologies.

The Minimum Qualifications

  • Bachelor's or master's degree in computer science, Cybersecurity, or related field.

  • 8+ years of experience in vulnerability management, configuration assurance, or related security engineering roles.

  • Relevant security certifications such as CISSP, CISM, OSCP, GIAC (GSEC, GCIH, GCIA, etc.) from an industry recognized certifier (e.g., SANS/GIAC, CompTIA, ISACA, ISC2, etc.)

The Ideal Qualifications

  • Hands on experience with vulnerability scanning tools and configuration assessment platforms.

  • Familiar with advanced vulnerability management techniques such as continuous threat and exposure management and external attack surface management.

  • Deep understanding of CVSS, MITRE ATT&CK, threat modeling, and risk-based prioritization.

  • Experience implementing and validating compensating controls in enterprise environments.

  • Knowledge of cybersecurity concepts and methods including secure configuration management, data protection, security monitoring, incident response, patch management, governance, enterprise security strategies, and architecture.

  • Deep understanding of security vulnerabilities, exploits, and mitigation techniques.

  • Strong understanding of risk analysis, vulnerability assessment methodologies, and securing baselines.

  • Clear understanding of various operating systems (Windows, Unix, etc.,), secure configuration and build images.

  • Experience with cloud platforms (AWS, Azure, GCP), container security (Docker, Kubernetes), and security frameworks specific to cloud environment.

  • Familiarity with security best practices, regulatory requirements, and industry frameworks (e.g., NIST, ISO, CIS, etc.).

  • Strong scripting skills (Python, PowerShell, Bash) for automation and data manipulation.

  • Strong knowledge of networking protocols, firewalls, VPNs, and security measures.

  • Strong analytical, problem-solving, communication, and technical writing skills.

  • Excellent communication skills and ability to influence cross-functional teams.

  • Experience working in large, complex environments.

  • Ability to manage multiple projects and tasks effectively, with a proactive and detail-oriented approach.

  • Able to translate complex technical issues into simple, easy to understand concepts.

What to Expect as Part of MassMutual and the Team

  • Regular meetings with the Vulnerability Management and Configuration Assurance team.

  • Focused one-on-one meetings with your manager.

  • Access to mentorship opportunities.

  • Networking opportunities including access to Asian, Hispanic/Latinx, African American, women, LGBTQIA+, veteran and disability-focused Business Resource Groups.

  • Access to learning content on Degreed and other informational platforms.

  • Your ethics and integrity will be valued by a company with a strong and stable ethical business with industry leading pay and benefits.

MassMutual is an equal employment opportunity employer. We welcome all persons to apply.

If you need an accommodation to complete the application process, please contact us and share the specifics of the assistance you need.

MassMutual will accept applications on an ongoing basis until such time as a candidate has been offered employment. The job description includes the main duties of this position, which may evolve over time. You may be required to perform other duties not listed.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment.


Salary Range: $134,400.00-$176,400.00
Apply Now

Hiring Process

Explore

Explore our open jobs by clicking 'search jobs' to find a position that aligns with your experience and skills. You may also consider joining our Talent Network.

Apply

Click the “apply” button on that job posting to complete and submit your application. Your application will be reviewed by a recruiter, which, due to the volume of applications received, may take some time as we carefully consider each application.

Screen

After your application has been reviewed, if you meet the qualifications for the role, a recruiter will reach out to you to start a conversation.

Interview

If you are invited for an interview, you will be scheduled to meet with the hiring manager and hiring team.

Offer

If you are extended an offer to join MassMutual and accept, your start will be contingent upon a satisfactory background check.

Hire

If you accept the offer, we will be so excited to welcome you to the MassMutual community!

If you need an accommodation to complete the application process, please contact us and share the specifics of the assistance you need.

By the numbers*

  • 88% of employee respondents say they are proud to work at MassMutual
  • 90
    %
    of employee respondents say they feel encouraged to bring forth new ideas
  • 86% of employee respondents say MassMutual cares about and supports the well-being of their employees

*Source: 2024 MassMutual employee engagement survey

Three people talking and walking

Award-Winning Culture

MassMutual is guided by a single purpose: We help people secure their future and protect the ones they love. As a company operated for the benefit of our members and participating policyowners, we are defined by mutuality and our vision to provide financial well-being for all Americans. It’s more than our company structure — it’s our way of life. We are a company of people protecting people. Our company exists because people are willing to share risk and resources and rely on each other when it counts.

We strive to build a thriving community where everyone is valued, included, and feels that they belong.

At MassMutual, we Live Mutual.

Woman smiling in front of a wall of raised text

How We Work

MassMutual’s flexible workplace approach combines the importance of connecting in person and the flexibility of working remotely. Our hybrid model puts collaboration first with employees coming in at least three days per week to our spectacular campus settings and also enjoying the flexibility of remote Fridays, company-wide remote weeks, and a bank of flexible remote weeks to use throughout the year.

Benefits for the whole you (and your loved ones)

There’s more to your life than your job and there’s more to your aspirations than a paycheck. We take a holistic view of compensation and benefits that provides the flexibility to create a healthy balance in your life for work, family, and community. We offer the benefits you’d expect, like medical, dental, 401(k), and generous vacation time, but we also offer ones you might not expect, like three paid days for volunteering, a $1,250 annual Well-Being Wallet, and up to 320 hours of caregiver leave.

Explore some of our offerings below. Benefit details can be found here.

Paid Time Off

  • In addition to generous vacation time, paid holidays, and flexible holidays, MassMutual offers 'take care' time to care for yourself or someone you love—whether for physical illness or mental health.
health and well-being icon

Health & Well-Being

In addition to top-line medical and dental coverage, personalized mental health solutions, on-site and virtual health coaching, and much more, MassMutual reimburses employees up to $1,250 per year for eligible expenses supporting mental, physical, and financial well-being.

Financial Well-Being

In addition to competitive salaries and bonuses, educational assistance programs, and much more, MassMutual offers up to a 10% total 401(k) benefit, consisting of a 5% company match and a 5% annual contribution.

Taking Care

MassMutual offers generous maternity and parental leaves, as well as bereavement leave to mourn the loss of a loved one (and the employee defines 'loved one'). In addition, we offer up to 320 hours of caregiver leave to help employees support loved ones in times of need.

Giving Back

MassMutual offers three paid days for employees to volunteer with eligible nonprofits of their choice, and the MassMutual Foundation matches employee donation dollars to eligible nonprofit organizations up to $5,000 annually.

Commuter Benefits

MassMutual offers a Qualified Commuter Program through which eligible employees can pay qualified workplace commuting expenses with before-tax dollars, as well as a commuter wallet option for employees based at Boston and NYC campuses.

Why MassMutual?

Kevin

Compliance Consultant

Seth

Service Management Consultant

Kymberly

Head of Experience Journey Mapping

where we work

Springfield Office

Springfield Office

1295 State Street, Springfield, MA

Boston Office

10 Fan Pier Blvd, Boston, MA

New York Office

2 Park Ave,
New York, NY

Virtual

Sign up for job alerts

Don't see what you're looking for? Sign up for job alerts and we'll notify you when jobs become available.

Join Our Talent Network.

Check out why it’s great to work at MassMutual.

Please complete the form to join our Talent Network, which means you’ll receive follow-up emails with additional information on jobs that might interest you, MassMutual news, and information about what it’s like to work here.

Interested InPlease select a category or location option. Click “Add” to select your preferences.

By submitting this form I agree to receive career opportunity information from MassMutual and acknowledge that I have read and understood the Online Privacy Notice, (opens in new window) and if applicable, the California Consumer Privacy Act Disclosure, (opens in new window) including the categories of personal data being processed, the way they are processed, the purposes and the legal grounds for processing, the retention period, the recipients of my personal data, the security of my personal data, as well as my data processing rights.

Job recruiter fraud is a scam by impostors posing as recruiters or representatives of a company promoting fake job opportunities to job seekers.

MassMutual will never ask job candidates to pay any kind of fee, make cash or check advancements, cash checks or make an investment in any product or service or provide information such as credit card numbers or banking PIN numbers as part of our hiring process.

If you are contacted by anyone asking for information outlined above, it is likely fraudulent. If you have any concerns about the veracity of a request, please contact us to verify its legitimacy.