Security Engineer

• Support the end-to-end vulnerability management lifecycle from identification and assessment through remediation guidance and tracking.
• Operate and maintain vulnerability scanning capabilities, including Tenable Security Center.
• Analyze security findings, determine risk, and communicate impact and remediation priorities to technology teams.
• Develop detailed remediation guidance and recommend compensating controls when full remediation is not feasible.
• Partner with application owners and infrastructure teams to coordinate and prioritize remediation activities.
• Create clear technical documentation and remediation instructions for independent execution by partner teams.
• Support ingestion and management of findings within Brinqa or similar platforms.
• Work across Windows, Linux, cloud, and other environments to drive vulnerability management activities.
• Align vulnerability management processes with compliance requirements such as PCI, HIPAA, and SOX.
• Research emerging vulnerabilities, security technologies, and vulnerability management practices as needed.

Our client seeks a Senior Security Engineer to support the vulnerability management lifecycle. The role will maintain and operate scanning capabilities, analyze findings, develop remediation guidance, and coordinate remediation across application and infrastructure teams. The position requires experience with Tenable products, strong communication, and the ability to translate complex risk into actionable steps for technical stakeholders., * 5+ years of experience in cybersecurity or a related security field with strong vulnerability management focus.

• Strong understanding of the vulnerability management lifecycle and risk-based prioritization and remediation.
• Experience with Tenable products, preferably Tenable Security Center.
• Experience analyzing vulnerabilities and producing actionable remediation guidance.
• Working knowledge of Windows and Linux operating systems.
• Strong written communication and documentation skills, with ability to explain complex risk to technical partners and application owners.
• Strong organizational skills with ability to coordinate activities across multiple teams.
• Additional preferred experience: Azure and GCP, PCI/HIPAA/SOX, scripting in Perl/Python/Ruby/shell, Brinqa or similar platforms, and Operational Technology exposure.

We can facilitate w2 and corp-to-corp consultants. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.

Rate: $75.00 to $85.00/hr. w2, Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.

W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality.

If anyone reaches out to you about an open position connected with Eliassen Group, please ensure that you are working directly with us by confirming the following:

· When you work with Eliassen Group, all email communication will come from an Eliassen.com address, never Gmail, Yahoo, etc.

Eliassen Group is a strategic consulting firm that helps organizations reach further and achieve more through our technology, business advisory, and life sciences solutions. For nearly 40 years, we have combined exceptional people, deep domain expertise, and intelligent capabilities to expand our clients’ capacity and accelerate meaningful outcomes. We are driven by a purpose to positively impact the lives of our employees, clients, consultants, and the communities we serve.