Security Engineer - Vulnerability Management Specialist

PCI Professional Services; United States; On-site; USD 110,000 - 160,000; Full time

Job summary

PCI Federal Services (PCIFS) is seeking a Security Engineer - Vulnerability Management Specialist to lead and mature the organization's vulnerability management program across systems, networks, and applications. You will identify, assess, and mitigate risks, collaborating with IT, security, and development teams to strengthen posture.

The role requires 4–6 years in vulnerability management, hands-on experience with Nessus, Qualys, Rapid7, and OpenVAS, and familiarity with CVSS, NIST 800-53, and

Qualifications

• Minimum 4–6 years in vulnerability management or related info security role.
• Knowledge of CVSS, NIST 800-53, OWASP Top 10.
• Understanding of Windows, Linux, macOS vulnerabilities.
• Familiarity with patch management and compliance like FISMA/SOX.
• Experience with vulnerability reporting and risk communication.
• Bachelor's degree or equivalent work experience.

Responsibilities

• Manage and enhance the vulnerability management program across systems, networks, and apps.
• Identify, assess, and mitigate security vulnerabilities.
• Collaborate with IT, security, and development teams to improve posture.
• Communicate risks to stakeholders and drive remediation.
• Continuously improve processes, tooling, and reporting.

Skills

Vulnerability management

PoC development

Incident response

Threat modeling

SIEM integration

Log analysis

Event correlation

Compliance knowledge

Education

Bachelor's degree in Cybersecurity

Tools

Tenable Nessus

Qualys

Rapid7

OpenVAS

SCAP/CIS-CAT

Metasploit

AWS Inspector

Azure Security Center

GCP Security Command Center

Splunk

QRadar

Job description

PCI Federal Services (PCIFS) is seeking a Security Engineer - Vulnerability Management Specialist to lead and mature the organization's vulnerability management program across systems, networks, and applications. You will identify, assess, and mitigate risks, collaborating with IT, security, and development teams to strengthen posture.

The role requires 4–6 years in vulnerability management, hands-on experience with Nessus, Qualys, Rapid7, and OpenVAS, and familiarity with CVSS, NIST 800-53, and