Senior Vulnerability Management Engineer - Remote

Eliassen Group

Honolulu (HI)

Remote

USD 103,000 - 117,000

Part time

6 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

Eliassen Group is seeking a Senior Security Engineer for a contract engagement. The role focuses on supporting the vulnerability management lifecycle, operatingTen able scanning capabilities, and delivering remediation guidance across Windows, Linux, and cloud environments.

The candidate will translate risk into actionable steps for technical stakeholders and align processes with PCI, HIPAA, and SOX. The position offers remote work with possible on-site coordination; prior experience with

Qualifications

5+ years of experience in cybersecurity or a related security field with strong vulnerability management focus.
Strong understanding of the vulnerability management lifecycle and risk-based prioritization and remediation.
Experience with Tenable products, preferably Tenable Security Center.
Experience analyzing vulnerabilities and producing actionable remediation guidance.
Working knowledge of Windows and Linux operating systems.
Strong written communication and documentation skills, with ability to explain complex risk to technical partners and application owners.
Strong organizational skills with ability to coordinate activities across multiple teams.
Additional preferred experience: Azure and GCP, PCI/HIPAA/SOX, scripting in Perl/Python/Ruby/shell, Brinqa or similar platforms, and Operational Technology exposure.

Responsibilities

Support the end-to-end vulnerability management lifecycle from identification and assessment through remediation guidance and tracking.
Operate and maintain vulnerability scanning capabilities, including Tenable Security Center.
Analyze security findings, determine risk, and communicate impact and remediation priorities to technology teams.
Develop detailed remediation guidance and recommend compensating controls when full remediation is not feasible.
Partner with application owners and infrastructure teams to coordinate and prioritize remediation activities.
Create clear technical documentation and remediation instructions for independent execution by partner teams.
Support ingestion and management of findings within Brinqa or similar platforms.
Work across Windows, Linux, cloud, and other environments to drive vulnerability management activities.
Align vulnerability management processes with compliance requirements such as PCI, HIPAA, and SOX.
Research emerging vulnerabilities, security technologies, and vulnerability management practices as needed.