Vulnerability Management Engineer — Hybrid Contract

Brooksource; Charlotte (NC); Hybrid; USD 83,000 - 124,000; Part time

Job summary

Brooksource is seeking a Cyber Security Engineer to join an enterprise Vulnerability Management team in Charlotte, NC. This contract role supports the day‑to‑day health and operation of vulnerability scanning tools, integrations, and reporting within a large financial services environment.

The ideal candidate has foundational experience with vulnerability management, scripting, and APIs, and a curiosity for how security technologies work together.

Qualifications

• 1–3 years in cybersecurity or related field.
• Hands-on with vulnerability scanners (Qualys, Tenable, Nessus, Rapid7).
• Scripting/automation with Python, PowerShell, Bash.
• Familiarity with REST APIs and integration concepts.
• Understanding of CVEs, severity, and risk prioritization.
• Strong troubleshooting and collaboration across teams.

Responsibilities

• Operate enterprise vulnerability management tools daily.
• Monitor scans, jobs, and integrations; fix failures.
• Configure and engineer vulnerability scanning infrastructure.
• Reconcile scan scope to identify coverage gaps.
• Investigate issues with infra, security, and tech teams.
• Support change-management for tooling and production environments.
• Enhance automation with Python, REST APIs.
• Develop automation for monitoring, reporting, and processes.
• Support vulnerability reporting, dashboards, and docs for stakeholders.
• Help expand exposure-management capabilities enterprise-wide.

Skills

Vulnerability management

Python scripting

REST APIs

Troubleshooting

Communication

Tools

Qualys VMDR

PowerShell

Bash

REST API tooling

Job description

Brooksource is seeking a Cyber Security Engineer to join an enterprise Vulnerability Management team in Charlotte, NC. This contract role supports the day‑to‑day health and operation of vulnerability scanning tools, integrations, and reporting within a large financial services environment.

The ideal candidate has foundational experience with vulnerability management, scripting, and APIs, and a curiosity for how security technologies work together.