Security Engineer

Eliassen Group; Montpelier (VT); Remoto; USD 103.000 - 117.000; Part-time

Vantaggi offerti da questo lavoro

Medical plans

Dental and Vision

401(k) with match

Sick time

Descrizione del lavoro

Eliassen Group is seeking a Senior Security Engineer to support the vulnerability management lifecycle across Windows, Linux, and cloud environments. The role emphasizes remediation guidance, risk-based prioritization, and cross-team collaboration to drive secure outcomes.

The position is remote, contract-based, and requires 5+ years in cybersecurity with Tenable experience. Clear communication and strong documentation skills are essential to coordinate across application owners and

Competenze

• 5+ years of experience in cybersecurity with a focus on vulnerability management.
• Experience with Tenable products, preferably Tenable Security Center.
• Experience analyzing vulnerabilities and producing actionable remediation guidance.
• Working knowledge of Windows and Linux operating systems.
• Strong written communication and ability to explain risk to technical partners.

Mansioni

• Support end-to-end vulnerability management lifecycle from identification to remediation guidance.
• Operate and maintain vulnerability scanning capabilities, including Tenable Security Center.
• Analyze findings, determine risk, and communicate remediation priorities to teams.
• Develop remediation guidance and suggest compensating controls when needed.
• Coordinate remediation activities with application owners and infrastructure teams.
• Create technical documentation and remediation instructions for independent execution.
• Assist ingestion and management of findings within Brinqa or similar platforms.
• Work across Windows, Linux, cloud and other environments to drive vulnerability efforts.
• Align processes with PCI, HIPAA, SOX compliance requirements.

Conoscenze

Vulnerability management

Risk-based prioritization

Technical documentation

Windows

Linux

Communication

Strumenti

Tenable Security Center

Brinqa

Azure

GCP

Descrizione del lavoro

Security Engineer

Anywhere

Remote in either Cincinnati, OH

Type: Contract

Category: Engineer

Industry: Retail

Workplace Type: Remote

Standard Hours: Open

Description:

Our client seeks a Senior Security Engineer to support the vulnerability management lifecycle. The role will maintain and operate scanning capabilities, analyze findings, develop remediation guidance, and coordinate remediation across application and infrastructure teams. The position requires experience with Tenable products, strong communication, and the ability to translate complex risk into actionable steps for technical stakeholders.

Rate: $75.00 to $85.00/hr. w2

Responsibilities:

• Support the end-to-end vulnerability management lifecycle from identification and assessment through remediation guidance and tracking.
• Operate and maintain vulnerability scanning capabilities, including Tenable Security Center.
• Analyze security findings, determine risk, and communicate impact and remediation priorities to technology teams.
• Develop detailed remediation guidance and recommend compensating controls when full remediation is not feasible.
• Partner with application owners and infrastructure teams to coordinate and prioritize remediation activities.
• Create clear technical documentation and remediation instructions for independent execution by partner teams.
• Support ingestion and management of findings within Brinqa or similar platforms.
• Work across Windows, Linux, cloud, and other environments to drive vulnerability management activities.
• Align vulnerability management processes with compliance requirements such as PCI, HIPAA, and SOX.
• Research emerging vulnerabilities, security technologies, and vulnerability management practices as needed.

Experience Requirements:

• 5+ years of experience in cybersecurity or a related security field with strong vulnerability management focus.
• Strong understanding of the vulnerability management lifecycle and risk-based prioritization and remediation.
• Experience with Tenable products, preferably Tenable Security Center.
• Experience analyzing vulnerabilities and producing actionable remediation guidance.
• Working knowledge of Windows and Linux operating systems.
• Strong written communication and documentation skills, with ability to explain complex risk to technical partners and application owners.
• Strong organizational skills with ability to coordinate activities across multiple teams.
• Additional preferred experience: Azure and GCP, PCI/HIPAA/SOX, scripting in Perl/Python/Ruby/shell, Brinqa or similar platforms, and Operational Technology exposure.

Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.

W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality.

About Eliassen Group:

Eliassen Group is a strategic consulting firm that helps organizations reach further and achieve more through our technology, business advisory, and life sciences solutions. For nearly 40 years, we have combined exceptional people, deep domain expertise, and intelligent capabilities to expand our clients’ capacity and accelerate meaningful outcomes. We are driven by a purpose to positively impact the lives of our employees, clients, consultants, and the communities we serve.

Eliassen is committed to building a diverse and inclusive team from a variety of backgrounds, perspectives, and skills. We are an Equal Opportunity and affirmative action employer and all employment decisions are based on merit, performance, and business needs. Eliassen does not discriminate on the basis of race, colour, gender identity or expression, sexual preference or orientation, sex (including pregnancy, childbirth, and related medical conditions), marital status, creed, religion, physical or mental disability, genetic information, military or veteran status, age, ancestry, national origin, citizenship status, prohibited criminal record inquiries of applicants and employees, or any other category protected by federal, state, or local laws.