Cybersecurity Engineer – Vulnerability Management, Patch Management & Automation

Seneca Resources; New York (NY); Presencial; USD 107 000 - 121 000; Tempo integral

Resumo da oferta

Seneca Resources is seeking a hands-on Cybersecurity Engineer in New York City to lead enterprise vulnerability management, patching, and security automation for critical infrastructure.

The role centers on administering vulnerability scanning platforms, coordinating remediation, and developing automated workflows and dashboards to improve visibility, reporting, and patch compliance. This on-site, 12+ month contract offers competitive W2 compensation.

Qualificações

• 4–6 years of professional experience in cybersecurity engineering or related field.
• Hands-on experience administering enterprise vulnerability scanning platforms.

Responsabilidades

• Administer, maintain, and optimize vulnerability scanning platforms across servers, endpoints, and network devices.
• Coordinate remediation efforts with infrastructure, network, and system teams.

Conhecimentos

Vulnerability scanning

Patch management

Security automation

Dashboards reporting

Networking fundamentals

Incident response concepts

Troubleshooting

Onsite collaboration

Ferramentas

Red Hat Enterprise Linux (RHEL)

Microsoft Active Directory

Python

PowerShell

Bash

Descrição da oferta de emprego

Job Title: Cybersecurity Engineer – Vulnerability Management, Patch Management & Automation

Job Location: New York, NY (100% Onsite – 5 days per week)

Contract Length: 12+ months, with likely extension

Pay Range: $78–$88/hr W2, depending on experience

Work Schedule: 37.5 hours per week; 4 weeks of required unpaid vacation

Interview Process: 1–2 rounds, conducted virtually via Microsoft Teams or onsite in New York City, at the hiring manager's discretion

Position Overview

Our government client in New York City is seeking an experienced Cybersecurity Engineer to support enterprise vulnerability management, patching technologies, security automation, and infrastructure protection initiatives.

This hands‑on technical role focuses on administering vulnerability scanning platforms, coordinating remediation efforts, supporting enterprise patch management, and developing automated security workflows and reporting dashboards.

The ideal candidate brings 4–6 years of cybersecurity or infrastructure security experience, strong networking fundamentals, and practical knowledge of vulnerability assessment, patch management, Linux environments, and enterprise security administration.

Experience supporting air‑gapped, isolated, or highly restricted environments is particularly valuable.

This is an excellent opportunity for a security professional who enjoys hands‑on technical problem‑solving, improving enterprise security processes, and strengthening the security posture of critical infrastructure.

Key Responsibilities

• Administer, maintain, configure, and optimize enterprise vulnerability scanning platforms across servers, endpoints, network devices, and infrastructure systems.
• Analyze vulnerability scan results, identify security risks, and prioritize remediation based on severity, exploitability, and asset criticality.
• Coordinate with infrastructure, network, and system administration teams to remediate vulnerabilities and validate corrective actions.
• Support enterprise patch management, including patch testing, deployment coordination, troubleshooting, and post‑deployment validation.
• Build and maintain test environments to evaluate patches, security configurations, and system updates before production implementation.
• Develop security automation scripts, workflows, dashboards, and reports to improve vulnerability visibility, remediation tracking, and operational efficiency.
• Support vulnerability scanning and patch management activities across segmented, restricted, or air‑gapped environments.
• Apply networking fundamentals, including TCP/IP, network protocols, traffic analysis, segmentation, and connectivity troubleshooting.
• Support security administration and vulnerability remediation involving Red Enterprise Linux (RHEL) and Microsoft Active Directory environments.
• Review system configurations, infrastructure vulnerabilities, and security weaknesses to recommend appropriate corrective actions.
• Analyze security findings, vulnerability intelligence, and infrastructure telemetry to support risk‑based security decisions.
• Collaborate with cybersecurity operations, networking, infrastructure, and systems administration teams to investigate and resolve security issues.
• Support security monitoring, threat analysis, and incident response activities as needed.
• Maintain technical documentation, vulnerability reports, remediation records, operating procedures, and security dashboards.
• Identify opportunities to improve scanning coverage, patch compliance, infrastructure security, and automation processes.

Required Qualifications

• 4–6 years of professional experience in cybersecurity engineering, network security, infrastructure security, vulnerability management, or a related technical discipline.
• Hands‑on experience administering or supporting enterprise vulnerability scanning platforms, including scan configuration, analysis, and remediation tracking.
• Strong knowledge of vulnerability assessment, risk‑based prioritization, remediation, and patch management processes.
• Experience supporting patch testing, deployment coordination, vulnerability validation, and remediation troubleshooting.
• Strong understanding of networking fundamentals, including TCP/IP, network protocols, segmentation, connectivity, and network traffic analysis.
• Experience supporting enterprise security operations, infrastructure protection, and IT security administration.
• Familiarity with security automation, scripting, and operational reporting.
• Ability to develop or support dashboards tracking vulnerability trends, patch compliance, and remediation progress.
• Experience troubleshooting technical and security‑related issues across networked systems and enterprise infrastructure.
• Understanding of security monitoring, threat intelligence, and incident response concepts.
• Strong analytical, troubleshooting, technical documentation, and problem‑solving abilities.
• Excellent communication skills and ability to collaborate with security, networking, infrastructure, and systems administration teams.
• Ability to independently manage technical assignments and prioritize security‑related activities.
• Ability to work onsite in New York City 5 days per week.

Preferred Qualifications

• 2–4 years of experience with Red Enterprise Linux (RHEL), including system security, configuration, and patching.
• 2–4 years of IT security administration experience.
• 2–4 years of experience with Microsoft Active Directory, including identity‑related security administration.
• Experience administering enterprise vulnerability scanning and patch management solutions.
• Hands‑on experience supporting air‑gapped, isolated, or highly restricted network environments.
• Experience building and maintaining security testing environments for patch validation and configuration testing.
• Scripting and automation experience with Python, PowerShell, or Bash.
• Experience developing security dashboards, vulnerability reports, and remediation tracking workflows.
• Familiarity with network segmentation, traffic analysis, and infrastructure security best practices.
• Experience applying vulnerability intelligence and risk‑based remediation strategies.
• Knowledge of enterprise security monitoring, threat detection, and incident response processes.
• Relevant cybersecurity certifications such as CompTIA Security+, CySA+, or equivalent.

Why This Opportunity?

• Support critical cybersecurity and infrastructure protection initiatives for a major New York City government organization.
• Work directly with enterprise vulnerability management, patching technologies, and security automation solutions.
• Gain exposure to complex infrastructure environments, including highly restricted and potentially air‑gapped networks.
• Take ownership of hands‑on security engineering, vulnerability remediation, and operational improvement initiatives.
• Collaborate with experienced cybersecurity, infrastructure, and network engineering professionals.
• Contribute to stronger security controls, improved patch compliance, and more effective vulnerability management processes.
• Competitive compensation of $78–$88/hr W2.
• Long‑term 12+ month contract opportunity with strong potential for extension.

About Seneca Resources

Seneca Resources is a client‑focused provider of Information Technology consulting services and workforce solutions for government and commercial organizations across the United States.

Our success is driven by a strong corporate culture that values collaboration, professional growth, and career development. We offer engaging work, competitive compensation, ongoing training, and opportunities for advancement. Seneca Resources is an Equal Opportunity Employer committed to fostering a diverse and inclusive workplace.