Senior Security Engineer

Golden Technology, Inc.; United States; On-site; USD 130,000 - 190,000; Full time

Job summary

Golden Technology, Inc. is seeking a Senior Security Engineer to join the Vulnerability Management team. You will support the full vulnerability lifecycle, analyze findings, and help owners prioritize remediation across Windows, Linux, and cloud environments.

The role requires strong communication skills and the ability to develop actionable remediation guidance for technical partners. You will coordinate across application and infrastructure teams and contribute to Brinqa workflows.

Qualifications

• 5+ years in cybersecurity with vulnerability management experience.
• Strong understanding of vulnerability lifecycle and risk-based prioritization.
• Experience with Tenable products, especially Tenable Security Center.
• Experience analyzing vulnerabilities and providing actionable remediation guidance.
• Proficient in Windows and Linux administration.
• Excellent written communication and documentation skills.
• Ability to communicate complex findings to technical partners and owners.
• Strong organizational skills to coordinate across multiple teams.
• Knowledge of Brinqa or similar vulnerability platforms.
• Experience with OT assets is a strong plus.

Responsibilities

• Support end-to-end vulnerability management lifecycle from identification to remediation guidance.
• Maintain vulnerability scanning capabilities including Tenable Security Center.
• Analyze findings to determine risk and remediation priorities for teams.
• Develop detailed remediation guidance and compensating controls when needed.
• Coordinate remediation with application owners and infrastructure teams.
• Create clear technical documentation and remediation instructions for others.
• Support ingestion and management of findings within Brinqa.
• Work across Windows, Linux, cloud, and other environments for vulnerability work.
• Ensure processes align with PCI, HIPAA, and SOX compliance requirements.
• Research emerging vulnerabilities and best practices as needed.

Skills

Vulnerability management

Vulnerability lifecycle

Tenable Security Center

Windows

Linux

Communication

Documentation

Cross-team coordination

Remediation guidance

Risk prioritization

Tools

Brinqa

Tenable Security Center

Azure

GCP

Job description

The Senior Security Engineer will join the Vulnerability Management team and help technology teams navigate the full vulnerability management lifecycle. This role will provide critical coverage for the team's vulnerability and exposure management activities, supporting the identification and assessment of security vulnerabilities and helping application owners understand, prioritize, and address associated risk.

This is a senior-level role requiring strong vulnerability management knowledge and the ability to work effectively across technical teams. The engineer will support vulnerability scanning tools and processes, analyze security findings, develop remediation guidance, and help coordinate remediation efforts with application owners and infrastructure teams. The ideal candidate can work with limited ramp-up and communicate complex security issues in clear, actionable terms.

Required Qualifications

• 5+ years of experience in cybersecurity or a related security field, with strong experience in vulnerability management.
• Strong understanding of the vulnerability management lifecycle and risk-based approaches to vulnerability prioritization and remediation.
• Experience with Tenable vulnerability scanning products, with Tenable Security Center experience strongly preferred.
• Experience analyzing security vulnerabilities and developing actionable remediation guidance.
• Working knowledge of Windows and Linux operating systems.
• Strong written communication and documentation skills.
• Ability to communicate complex security findings and risk in clear, understandable terms to technical partners and application owners.
• Strong organizational skills and ability to coordinate vulnerability activities across multiple teams.

Additional Relevant Experience

• Experience with cloud platforms, particularly Azure and GCP.
• Knowledge of PCI, HIPAA, and SOX compliance requirements.
• Knowledge of common languages and scripting technologies such as Perl, Python, Ruby, and shell scripting.
• Experience with Brinqa or similar vulnerability management platforms.
• Experience with Operational Technology (OT) assets and vulnerabilities is a strong plus.

Key Responsibilities

• Support the end-to-end vulnerability management lifecycle, from vulnerability identification and assessment through remediation guidance and tracking.
• Support and maintain vulnerability scanning capabilities, including Tenable Security Center.
• Analyze security findings to determine risk and help technology teams understand vulnerability impact and remediation priorities.
• Develop detailed remediation guidance and recommend compensating controls when vulnerabilities cannot be fully remediated.
• Partner with application owners and infrastructure teams to help coordinate and prioritize vulnerability remediation.
• Create clear technical documentation and remediation instructions that other teams can independently understand and execute.
• Support the ingestion and management of security findings within Brinqa.
• Work across Windows, Linux, cloud, and other technology environments to support vulnerability management activities.
• Support vulnerability management processes in alignment with applicable compliance requirements, including PCI, HIPAA, and SOX.
• Research emerging vulnerabilities, security technologies, and vulnerability management practices as needed.

Preferred Background/Experience:

Vulnerability management or exposure management background in a complex enterprise environment.

Ideal Candidate:

Senior-level engineer who can ramp up quickly, work independently, and effectively partner with application and infrastructure teams.

Project Focus:

Supporting the full vulnerability management lifecycle and helping KTD teams understand, prioritize, and address security risk.