Security Engineer

Job Title: Security Engineer

Location Requirements: Remote

Job Type: Contract

Role Overview: Join the vulnerability management team as a senior security engineer. You will support activities across the full lifecycle of vulnerability management, including scanning, analysis, and remediation coordination. You will provide guidance to application owners and infrastructure teams, communicate complex security findings, and develop clear remediation instructions. This role demands the ability to work independently and effectively across technical teams, with minimal ramp-up time.

Responsibilities:

• Support the end-to-end vulnerability management lifecycle from identification to remediation tracking
• Maintain vulnerability scanning capabilities, including Tenable Security Center
• Analyze security findings to assess risk and guide teams on remediation priorities
• Develop detailed remediation guidance and recommend compensating controls when needed
• Coordinate vulnerability remediation with application owners and infrastructure teams
• Create technical documentation and clear remediation instructions for other teams
• Support ingestion and management of security findings within vulnerability management platforms
• Work across Windows, Linux, cloud, and other environments to support vulnerability management activities
• Ensure vulnerability management aligns with applicable compliance requirements such as PCI, HIPAA, and SOX
• Research emerging vulnerabilities, security technologies, and best practices

Required Qualifications:

• 5+ years of experience in cybersecurity or related security field, with strong vulnerability management expertise
• Strong understanding of the vulnerability management lifecycle and risk-based prioritization
• Experience with Tenable vulnerability scanning products; Tenable Security Center experience strongly preferred
• Experience analyzing security vulnerabilities and developing actionable remediation guidance
• Working knowledge of Windows and Linux operating systems
• Strong written communication and documentation skills
• Ability to clearly communicate security findings and risk to technical teams and application owners
• Strong organizational skills and ability to coordinate activities across multiple teams
• Willingness to work EST hours to align with the team

Additional Relevant Experience:

• Experience with cloud platforms, especially Azure and GCP
• Knowledge of PCI, HIPAA, and SOX compliance requirements
• Knowledge of scripting languages such as Perl, Python, Ruby, and shell scripting
• Experience with vulnerability management platforms like Brinqa or similar
• Experience with Operational Technology (OT) assets and vulnerabilities is a strong plus

Equal Employment Opportunity Statement Gravity IT Resources is an Equal Opportunity Employer. We are committed to creating an inclusive environment for all employees and applicants. We do not discriminate on the basis of race, color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, age, disability, genetic information, veteran status, or any other legally protected characteristic. All employment decisions are based on qualifications, merit, and business needs.