Remote Security Engineer — Vulnerability Management

PCI Professional Services LLC; United States; Remote; USD 100,000 - 140,000; Full time

Job summary

PCI Federal Services (PCIFS) is seeking a Security Engineer specializing in Vulnerability Management to work remotely. You will identify, assess and mitigate vulnerabilities across systems, networks and applications, coordinating with IT and development teams to improve security maturity and reporting.

Ideal candidates have 4–6 years in vulnerability management, hands-on with Nessus/Qualys/Rapid7, and strong knowledge of control frameworks and compliance requirements.

Qualifications

• 4–6 years of experience in vulnerability management or related information security role.
• Advanced knowledge of vulnerability management tools such as Tenable Nessus, Qualys, Rapid7, or OpenVAS.
• Strong understanding of vulnerability scanning, assessment, and risk prioritization.
• Familiarity with CVSS, NIST 800-53, OWASP Top 10.
• Understanding of Windows, Linux, macOS and related vulnerabilities.
• Knowledge of TCP/IP networks, firewalls, routers, switches.
• Experience with patch management processes.
• Familiarity with FISMA and SOX compliance.
• Knowledge of NIST CSF, ISO 27001, CIS controls.
• Bachelor's degree in Cybersecurity or related field.

Responsibilities

• Identify, assess, and mitigate vulnerabilities across systems, networks, and applications.
• Collaborate with IT, security, and development teams to improve security posture.
• Maintain and improve vulnerability management processes, tools, and reports.
• Assist in incident response when vulnerabilities are exploited.
• Ensure compliance with relevant security standards.

Skills

Vulnerability management

Risk assessment

Incident response

Security frameworks

Patch management

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field

Tools

Tenable Nessus

Qualys

Rapid7

OpenVAS

Metasploit

Job description

PCI Federal Services (PCIFS) is seeking a Security Engineer specializing in Vulnerability Management to work remotely. You will identify, assess and mitigate vulnerabilities across systems, networks and applications, coordinating with IT and development teams to improve security maturity and reporting.

Ideal candidates have 4–6 years in vulnerability management, hands-on with Nessus/Qualys/Rapid7, and strong knowledge of control frameworks and compliance requirements.