Security Engineer

Eliassen Group; Annapolis (MD); À distance; USD 103 000 - 117 000; Plein temps

Résumé du poste

Eliassen Group is seeking a Senior Security Engineer to support the vulnerability management lifecycle in a remote-capable contract role. You will maintain scanning capabilities, analyze findings, and coordinate remediation across application and infrastructure teams.

The role requires experience with Tenable products, strong communication, and the ability to translate complex risk into actionable steps for technical stakeholders. This position offers a W2 contract with hourly pay of $75–$85.

Qualifications

• 5+ years in cybersecurity with vulnerability management focus.
• Experience with Tenable products, preferably Tenable Security Center.
• Experience analyzing vulnerabilities and producing remediation guidance.
• Working knowledge of Windows and Linux.
• Scripting in Perl/Python/Ruby/shell; Brinqa or similar platforms.

Responsabilités

• Support end-to-end vulnerability management lifecycle from identification to remediation guidance and tracking.
• Operate and maintain vulnerability scanning capabilities including Tenable Security Center.
• Analyze findings, determine risk, and communicate remediation priorities to tech teams.
• Develop detailed remediation guidance and compensating controls where full remediation is not feasible.
• Coordinate remediation activities with application owners and infrastructure teams.
• Create clear technical documentation and remediation instructions for execution by partner teams.
• Support ingestion and management of findings within Brinqa or similar platforms.
• Work across Windows, Linux, cloud and other environments to drive vulnerability management.

Connaissances

Vulnerability management

Risk prioritization

Technical communication

Documentation

Outils

Tenable Security Center

Brinqa

Description du poste

Security Engineer

Anywhere

Remote in either Cincinnati, OH

Type: Contract

Category: Engineer

Industry: Retail

Workplace Type: Remote

Standard Hours: Open

Description:

Our client seeks a Senior Security Engineer to support the vulnerability management lifecycle. The role will maintain and operate scanning capabilities, analyze findings, develop remediation guidance, and coordinate remediation across application and infrastructure teams. The position requires experience with Tenable products, strong communication, and the ability to translate complex risk into actionable steps for technical stakeholders.

Rate: $75.00 to $85.00/hr. w2

Responsibilities:

• Support the end-to-end vulnerability management lifecycle from identification and assessment through remediation guidance and tracking.
• Operate and maintain vulnerability scanning capabilities, including Tenable Security Center.
• Analyze security findings, determine risk, and communicate impact and remediation priorities to technology teams.
• Develop detailed remediation guidance and recommend compensating controls when full remediation is not feasible.
• Partner with application owners and infrastructure teams to coordinate and prioritize remediation activities.
• Create clear technical documentation and remediation instructions for independent execution by partner teams.
• Support ingestion and management of findings within Brinqa or similar platforms.
• Work across Windows, Linux, cloud, and other environments to drive vulnerability management activities.
• Align vulnerability management processes with compliance requirements such as PCI, HIPAA, and SOX.
• Research emerging vulnerabilities, security technologies, and vulnerability management practices as needed.

Experience Requirements:

• 5+ years of experience in cybersecurity or a related security field with strong vulnerability management focus.
• Strong understanding of the vulnerability management lifecycle and risk-based prioritization and remediation.
• Experience with Tenable products, preferably Tenable Security Center.
• Experience analyzing vulnerabilities and producing actionable remediation guidance.
• Working knowledge of Windows and Linux operating systems.
• Strong written communication and documentation skills, with ability to explain complex risk to technical partners and application owners.
• Strong organizational skills with ability to coordinate activities across multiple teams.
• Additional preferred experience: Azure and GCP, PCI/HIPAA/SOX, scripting in Perl/Python/Ruby/shell, Brinqa or similar platforms, and Operational Technology exposure.

Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.

W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality.

About Eliassen Group:

Eliassen Group is a strategic consulting firm that helps organizations reach further and achieve more through our technology, business advisory, and life sciences solutions. For nearly 40 years, we have combined exceptional people, deep domain expertise, and intelligent capabilities to expand our clients’ capacity and accelerate meaningful outcomes. We are driven by a purpose to positively impact the lives of our employees, clients, consultants, and the communities we serve.

Eliassen is committed to building a diverse and inclusive team from a variety of backgrounds, perspectives, and skills. We are an Equal Opportunity and affirmative action employer and all employment decisions are based on merit, performance, and business needs. Eliassen does not discriminate on the basis of race, colour, gender identity or expression, sexual preference or orientation, sex (including pregnancy, childbirth, and related medical conditions), marital status, creed, religion, physical or mental disability, genetic information, military or veteran status, age, ancestry, national origin, citizenship status, prohibited criminal record inquiries of applicants and employees, or any other category protected by federal, state, or local laws.