Senior Security Engineer, Vulnerability Management (Remote)

Eliassen Group; Boise (ID); Remoto; USD 103.000 - 117.000; Tempo pieno

Vantaggi offerti da questo lavoro

Remote work

Medical benefits

401(k) with match

Sick time

Descrizione del lavoro

Eliassen Group is seeking a Senior Security Engineer to support the vulnerability management lifecycle, operating scanning tools, assessing findings, and guiding remediation across application and infrastructure teams in a remote contract role.

The role emphasizes translating risk into actionable steps for technical stakeholders, with experience across Windows, Linux, cloud, and regulatory frameworks like PCI/HIPAA/SOX.

Competenze

• 5+ years of experience in cybersecurity or a related security field with strong vulnerability management focus.
• Strong understanding of the vulnerability management lifecycle and risk-based prioritization and remediation.
• Experience with Tenable products, preferably Tenable Security Center.
• Experience analyzing vulnerabilities and producing actionable remediation guidance.
• Working knowledge of Windows and Linux operating systems.
• Strong written communication and documentation skills, with ability to explain complex risk to technical partners and application owners.
• Strong organizational skills with ability to coordinate activities across multiple teams.
• Additional preferred experience: Azure and GCP, PCI/HIPAA/SOX, scripting in Perl/Python/Ruby/shell, Brinqa or similar platforms, and Operational Technology exposure.

Mansioni

• Support the end-to-end vulnerability management lifecycle from identification and assessment through remediation guidance and tracking.
• Operate and maintain vulnerability scanning capabilities, including Tenable Security Center.
• Analyze security findings, determine risk, and communicate impact and remediation priorities to technology teams.
• Develop detailed remediation guidance and recommend compensating controls when full remediation is not feasible.
• Partner with application owners and infrastructure teams to coordinate and prioritize remediation activities.
• Create clear technical documentation and remediation instructions for independent execution by partner teams.
• Support ingestion and management of findings within Brinqa or similar platforms.
• Work across Windows, Linux, cloud, and other environments to drive vulnerability management activities.
• Align vulnerability management processes with compliance requirements such as PCI, HIPAA, and SOX.
• Research emerging vulnerabilities, security technologies, and vulnerability management practices as needed.

Conoscenze

Vulnerability management

Communication

Documentation

Cross-team coordination

Risk assessment

Strumenti

Tenable Security Center

Brinqa

Descrizione del lavoro

Eliassen Group is seeking a Senior Security Engineer to support the vulnerability management lifecycle, operating scanning tools, assessing findings, and guiding remediation across application and infrastructure teams in a remote contract role.

The role emphasizes translating risk into actionable steps for technical stakeholders, with experience across Windows, Linux, cloud, and regulatory frameworks like PCI/HIPAA/SOX.