Senior Mainframe Security & Vulnerability Management Engineer

Brilliant Infotech Inc.; Washington (District of Columbia); Remote; USD 165,000 - 234,000; Full time

Job summary

Brilliant Infotech Inc. is seeking a Senior Mainframe Security & Vulnerability Management Engineer for a remote, 18-month contract. The role focuses on IBM Z / z/OS security and vulnerability management across large regulated environments.

You will lead vulnerability assessments, CVE reporting, patch management automation, remediation planning, and security compliance, coordinating with vulnerability teams and supporting SMP/E and mainframe audit tools.

Qualifications

• 10+ years IBM Z security and 10+ years z/OS infrastructure experience.
• 5+ years vulnerability management with CVE reporting and patch management.
• Strong knowledge of z/OS, RACF/Top Secret, USS, CICS, MQ, Db2, and JES2/JES3 security.
• Familiarity with TCP/IP security, SSL/TLS, certificates, cryptographic controls, and SMF analysis.

Responsibilities

• Coordinate with vulnerability management teams on CVE reporting and patch automation.
• Establish patching schedules, response models, escalation procedures, and validation processes.
• Support SMP/E, baseline datasets, vulnerability scanning integration, and CVE dashboards.
• Assess vulnerabilities across z/OS components and middleware, and track remediation.
• Analyze exploitability, prioritize risks, and support risk acceptance reviews and compliance.

Skills

IBM Z security

z/OS infrastructure

vulnerability management

CVE reporting

patch management automation

SMP/E

zSecure

risk assessment

AI-assisted vulnerability analysis

Tools

zSecure

Compliance Event Manager

Mainframe audit tools

Job description

Role: Senior Mainframe Security & Vulnerability Management Engineer

Location: Remote

Type of Employment: Contract

Duration: 18 Months

Job Description

Seeking a senior professional with 10+ years of IBM Z / z/OS security experience and 5+ years in vulnerability management. The candidate will lead mainframe vulnerability assessments, CVE reporting, patch management automation, remediation planning, and security compliance for large-scale financial services or regulated environments.

Key Responsibilities

• Coordinate with vulnerability management teams on CVE reporting, patch automation, and remediation.
• Establish patching schedules, response models, escalation procedures, and validation processes.
• Support SMP/E, baseline datasets, vulnerability scanning integration, and CVE reporting dashboards.
• Assess vulnerabilities across z/OS, RACF, USS, CICS, MQ, Db2, JES, TCP/IP, certificates, and middleware.
• Analyze exploitability, prioritize risks, validate findings, and track remediation.
• Support risk acceptance reviews, compliance assessments, and AI-assisted vulnerability analysis.

Required Skills

• 10+ years IBM Z security and 10+ years z/OS infrastructure experience.
• 5+ years vulnerability management and direct experience with CVE reporting and patch management.
• Strong expertise in z/OS, RACF or Top Secret, USS, CICS, MQ, Db2, and JES2/JES3 security.
• Knowledge of TCP/IP security, SSL/TLS, digital certificates, cryptographic controls, and SMF analysis.
• Experience with zSecure, Compliance Event Manager, and mainframe audit tools.
• Experience in financial services or other regulated environments.

Preferred Skills

STIG, NIST 800-53, CIS Benchmarks, PCI DSS, Python/REXX automation, and AI-assisted vulnerability analysis.