Security Engineer

Are you an experienced Security Engineer looking for the right company to call “home”?

Look no further!

Our client is seeking an experienced Security Engineer, ready to bring their skills, experience, and energy to a great, growing team.

What you'll be doing…

• Support the end-to-end vulnerability management lifecycle, from vulnerability identification and assessment through remediation guidance and tracking.
• Support and maintain vulnerability scanning capabilities, including Tenable Security Center.
• Analyze security findings to determine risk and help technology teams understand vulnerability impact and remediation priorities.
• Develop detailed remediation guidance and recommend compensating controls when vulnerabilities cannot be fully remediated.
• Partner with application owners and infrastructure teams to help coordinate and prioritize vulnerability remediation.
• Create clear technical documentation and remediation instructions that other teams can independently understand and execute.
• Support the ingestion and management of security findings within vulnerability management platforms.
• Work across Windows, Linux, cloud, and other technology environments to support vulnerability management activities.
• Support vulnerability management processes in alignment with applicable compliance requirements, including PCI, HIPAA, and SOX.
• Research emerging vulnerabilities, security technologies, and vulnerability management practices as needed.

The right person has…

• 5+ years of experience in cybersecurity or a related security field, with strong experience in vulnerability management.
• Strong understanding of the vulnerability management lifecycle and risk-based approaches to vulnerability prioritization and remediation.
• Experience with vulnerability scanning products, with Tenable Security Center experience strongly preferred.
• Experience analyzing security vulnerabilities and developing actionable remediation guidance.
• Working knowledge of Windows and Linux operating systems.
• Strong written communication and documentation skills.
• Ability to communicate complex security findings and risk in clear, understandable terms to technical partners and application owners.
• Strong organizational skills and ability to coordinate vulnerability activities across multiple teams.
• Experience with cloud platforms, particularly Azure and GCP.
• Knowledge of PCI, HIPAA, and SOX compliance requirements.
• Knowledge of common languages and scripting technologies such as Perl, Python, Ruby, and shell scripting.
• Experience with vulnerability management platforms.
• Experience with Operational Technology (OT) assets and vulnerabilities is a strong plus.

Interested? Contact me directly to learn more!