Remote Senior Mainframe Security & Vulnerability Lead

Brilliant Infotech Inc.; Washington (District of Columbia); Remote; USD 165,000 - 234,000; Full time

Job summary

Brilliant Infotech Inc. is seeking a Senior Mainframe Security & Vulnerability Management Engineer for a remote, 18-month contract. The role focuses on IBM Z / z/OS security and vulnerability management across large regulated environments.

You will lead vulnerability assessments, CVE reporting, patch management automation, remediation planning, and security compliance, coordinating with vulnerability teams and supporting SMP/E and mainframe audit tools.

Qualifications

• 10+ years IBM Z security and 10+ years z/OS infrastructure experience.
• 5+ years vulnerability management with CVE reporting and patch management.
• Strong knowledge of z/OS, RACF/Top Secret, USS, CICS, MQ, Db2, and JES2/JES3 security.
• Familiarity with TCP/IP security, SSL/TLS, certificates, cryptographic controls, and SMF analysis.

Responsibilities

• Coordinate with vulnerability management teams on CVE reporting and patch automation.
• Establish patching schedules, response models, escalation procedures, and validation processes.
• Support SMP/E, baseline datasets, vulnerability scanning integration, and CVE dashboards.
• Assess vulnerabilities across z/OS components and middleware, and track remediation.
• Analyze exploitability, prioritize risks, and support risk acceptance reviews and compliance.

Skills

IBM Z security

z/OS infrastructure

vulnerability management

CVE reporting

patch management automation

SMP/E

zSecure

risk assessment

AI-assisted vulnerability analysis

Tools

zSecure

Compliance Event Manager

Mainframe audit tools

Job description

Brilliant Infotech Inc. is seeking a Senior Mainframe Security & Vulnerability Management Engineer for a remote, 18-month contract. The role focuses on IBM Z / z/OS security and vulnerability management across large regulated environments.

You will lead vulnerability assessments, CVE reporting, patch management automation, remediation planning, and security compliance, coordinating with vulnerability teams and supporting SMP/E and mainframe audit tools.