Security Engineer

Eliassen Group; Austin (TX); Remote; USD 103,000 - 117,000; Full time

Benefits offered by this job

Medical plans

Dental & Vision

401(k) with match

Sick time & leave

Job summary

Eliassen Group is seeking a Senior Security Engineer to own the vulnerability management lifecycle, operating scanning tools and coordinating remediation across applications and infrastructure. The role supports Windows, Linux, cloud environments and requires experience with Tenable products.

Remote in the United States with W2 hourly rate, focusing on PCI, HIPAA and SOX compliance. Strong written communication and the ability to translate risk for technical stakeholders are essential.

Qualifications

• 5+ years in cybersecurity with a vulnerability management focus.
• Experience with Tenable products and vulnerability analysis.
• Strong written communication; ability to explain risk to technical partners.
• Working knowledge of Windows and Linux operating systems.
• Familiarity with PCI/HIPAA/SOX and cross-team coordination.

Responsibilities

• Support end-to-end vulnerability management lifecycle from identification to remediation guidance.
• Operate and maintain vulnerability scanning capabilities, incl. Tenable Security Center.
• Analyze findings, determine risk, and communicate priorities to technology teams.
• Develop remediation guidance and compensating controls when full remediation is not feasible.
• Coordinate remediation with application owners and infrastructure teams.
• Create technical documentation and remediation instructions for partner teams.
• Support ingestion and management of findings in Brinqa or similar platforms.
• Work across Windows, Linux, cloud and other environments.
• Align vulnerability management processes with PCI, HIPAA, and SOX compliance.
• Research emerging vulnerabilities and best practices as needed.

Skills

Vulnerability management

Security engineering

Communication

Risk assessment

Windows/Linux

Tools

Tenable Security Center

Brinqa

Job description

Security Engineer

Anywhere

Remote in either Cincinnati, OH

Type: Contract

Category: Engineer

Industry: Retail

Workplace Type: Remote

Standard Hours: Open

Description:

Our client seeks a Senior Security Engineer to support the vulnerability management lifecycle. The role will maintain and operate scanning capabilities, analyze findings, develop remediation guidance, and coordinate remediation across application and infrastructure teams. The position requires experience with Tenable products, strong communication, and the ability to translate complex risk into actionable steps for technical stakeholders.

Rate: $75.00 to $85.00/hr. w2

Responsibilities:

• Support the end-to-end vulnerability management lifecycle from identification and assessment through remediation guidance and tracking.
• Operate and maintain vulnerability scanning capabilities, including Tenable Security Center.
• Analyze security findings, determine risk, and communicate impact and remediation priorities to technology teams.
• Develop detailed remediation guidance and recommend compensating controls when full remediation is not feasible.
• Partner with application owners and infrastructure teams to coordinate and prioritize remediation activities.
• Create clear technical documentation and remediation instructions for independent execution by partner teams.
• Support ingestion and management of findings within Brinqa or similar platforms.
• Work across Windows, Linux, cloud, and other environments to drive vulnerability management activities.
• Align vulnerability management processes with compliance requirements such as PCI, HIPAA, and SOX.
• Research emerging vulnerabilities, security technologies, and vulnerability management practices as needed.

Experience Requirements:

• 5+ years of experience in cybersecurity or a related security field with strong vulnerability management focus.
• Strong understanding of the vulnerability management lifecycle and risk-based prioritization and remediation.
• Experience with Tenable products, preferably Tenable Security Center.
• Experience analyzing vulnerabilities and producing actionable remediation guidance.
• Working knowledge of Windows and Linux operating systems.
• Strong written communication and documentation skills, with ability to explain complex risk to technical partners and application owners.
• Strong organizational skills with ability to coordinate activities across multiple teams.
• Additional preferred experience: Azure and GCP, PCI/HIPAA/SOX, scripting in Perl/Python/Ruby/shell, Brinqa or similar platforms, and Operational Technology exposure.

Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.

W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality.

About Eliassen Group:

Eliassen Group is a strategic consulting firm that helps organizations reach further and achieve more through our technology, business advisory, and life sciences solutions. For nearly 40 years, we have combined exceptional people, deep domain expertise, and intelligent capabilities to expand our clients’ capacity and accelerate meaningful outcomes. We are driven by a purpose to positively impact the lives of our employees, clients, consultants, and the communities we serve.

Eliassen is committed to building a diverse and inclusive team from a variety of backgrounds, perspectives, and skills. We are an Equal Opportunity and affirmative action employer and all employment decisions are based on merit, performance, and business needs. Eliassen does not discriminate on the basis of race, colour, gender identity or expression, sexual preference or orientation, sex (including pregnancy, childbirth, and related medical conditions), marital status, creed, religion, physical or mental disability, genetic information, military or veteran status, age, ancestry, national origin, citizenship status, prohibited criminal record inquiries of applicants and employees, or any other category protected by federal, state, or local laws.