Security Engineer

Gravity IT Resources; Cincinnati (OH); Remote; USD 83,000 - 165,000; Part time

Job summary

Gravity IT Resources is seeking a Senior Security Engineer to join our vulnerability management team in a remote contract role. You will support the full lifecycle from identification to remediation tracking, coordinating with application owners and infrastructure teams to improve security posture.

You will provide guidance on findings, develop clear remediation instructions, and ensure alignment with PCI/HIPAA/SOX where applicable, while working EST hours with little ramp-up time.

Qualifications

• 5+ years of experience in cybersecurity with vulnerability management expertise.
• Strong understanding of vulnerability management lifecycle and risk-based prioritization.
• Experience with Tenable vulnerability scanning products; Tenable Security Center preferred.
• Experience analyzing vulnerabilities and developing remediation guidance.
• Working knowledge of Windows and Linux operating systems.
• Strong written communication and documentation skills.
• Ability to clearly communicate security findings and risk to technical teams and application owners.
• Strong organizational skills and ability to coordinate activities across multiple teams.
• Willingness to work EST hours to align with the team.

Responsibilities

• Support the end-to-end vulnerability management lifecycle from identification to remediation tracking
• Maintain vulnerability scanning capabilities, including Tenable Security Center
• Analyze security findings to assess risk and guide teams on remediation priorities
• Develop detailed remediation guidance and recommend compensating controls when needed
• Coordinate vulnerability remediation with application owners and infrastructure teams
• Create technical documentation and clear remediation instructions for other teams
• Support ingestion and management of security findings within vulnerability management platforms
• Work across Windows, Linux, cloud, and other environments to support vulnerability management activities
• Ensure vulnerability management aligns with applicable compliance requirements such as PCI, HIPAA, and SOX
• Research emerging vulnerabilities, security technologies, and best practices

Skills

Vulnerability management

Cybersecurity experience

Written communication

Documentation

Cross-team coordination

Stakeholder communication

EST hours availability

Risk-based prioritization

Windows/Linux familiarity

Tools

Tenable Security Center

Tenable products

Brinqa

Perl

Python

Ruby

Shell scripting

Azure

GCP

Job description

Job Title: Security Engineer

Location Requirements: Remote

Job Type: Contract

Role Overview: Join the vulnerability management team as a senior security engineer. You will support activities across the full lifecycle of vulnerability management, including scanning, analysis, and remediation coordination. You will provide guidance to application owners and infrastructure teams, communicate complex security findings, and develop clear remediation instructions. This role demands the ability to work independently and effectively across technical teams, with minimal ramp-up time.

Responsibilities:

• Support the end-to-end vulnerability management lifecycle from identification to remediation tracking
• Maintain vulnerability scanning capabilities, including Tenable Security Center
• Analyze security findings to assess risk and guide teams on remediation priorities
• Develop detailed remediation guidance and recommend compensating controls when needed
• Coordinate vulnerability remediation with application owners and infrastructure teams
• Create technical documentation and clear remediation instructions for other teams
• Support ingestion and management of security findings within vulnerability management platforms
• Work across Windows, Linux, cloud, and other environments to support vulnerability management activities
• Ensure vulnerability management aligns with applicable compliance requirements such as PCI, HIPAA, and SOX
• Research emerging vulnerabilities, security technologies, and best practices

Required Qualifications:

• 5+ years of experience in cybersecurity or related security field, with strong vulnerability management expertise
• Strong understanding of the vulnerability management lifecycle and risk-based prioritization
• Experience with Tenable vulnerability scanning products; Tenable Security Center experience strongly preferred
• Experience analyzing security vulnerabilities and developing actionable remediation guidance
• Working knowledge of Windows and Linux operating systems
• Strong written communication and documentation skills
• Ability to clearly communicate security findings and risk to technical teams and application owners
• Strong organizational skills and ability to coordinate activities across multiple teams
• Willingness to work EST hours to align with the team

Additional Relevant Experience:

• Experience with cloud platforms, especially Azure and GCP
• Knowledge of PCI, HIPAA, and SOX compliance requirements
• Knowledge of scripting languages such as Perl, Python, Ruby, and shell scripting
• Experience with vulnerability management platforms like Brinqa or similar
• Experience with Operational Technology (OT) assets and vulnerabilities is a strong plus

Equal Employment Opportunity Statement Gravity IT Resources is an Equal Opportunity Employer. We are committed to creating an inclusive environment for all employees and applicants. We do not discriminate on the basis of race, color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, age, disability, genetic information, veteran status, or any other legally protected characteristic. All employment decisions are based on qualifications, merit, and business needs.