Security Engineer

Benefits-forward contract opportunity: Vaco LLC is hiring a Senior Security Engineer to support vulnerability management for a leading enterprise client. This hybrid role in Cincinnati, OH (remote or hybrid) requires working EST hours, with a 6+ month contract and strong extension potential. You'll help drive risk reduction across complex environments while aligning vulnerability practices to key compliance needs.

Responsibilities

• Support the full vulnerability management lifecycle, from identification and assessment through remediation coordination and tracking.
• Administer and support vulnerability scanning platforms, including Tenable Security Center.
• Analyze security findings and perform risk assessment across applications, infrastructure, cloud environments, and operating systems.
• Develop remediation recommendations and compensating controls when vulnerabilities cannot be fully remediated.
• Partner with application owners, infrastructure teams, and security stakeholders to prioritize and coordinate remediation efforts.
• Create clear technical documentation and remediation guidance for engineering and operational teams.
• Support ingestion, analysis, and ongoing management of security findings within vulnerability management platforms such as Brinqa.
• Assist vulnerability management across Windows, Linux, cloud, and operational technology (OT) environments.
• Ensure vulnerability management activities align with compliance requirements including PCI, HIPAA, and SOX.
• Stay current on emerging threats, vulnerabilities, and industry best practices.

Requirements

• 5+ years of cybersecurity experience with a strong focus on vulnerability management.
• Deep understanding of the vulnerability management lifecycle and risk-based remediation strategies.
• Hands-on experience with Tenable vulnerability scanning tools, including Tenable Security Center.
• Experience evaluating security findings and translating them into actionable remediation guidance.
• Working knowledge of Windows and Linux operating systems.
• Strong written communication and documentation skills.
• Ability to explain complex security risks and findings to technical teams and business stakeholders.
• Proven ability to coordinate security initiatives across multiple teams.

Preferred Qualifications

• Experience with Azure and GCP cloud environments.
• Knowledge of PCI, HIPAA, and SOX compliance requirements.
• Familiarity with scripting languages such as Python, Perl, Ruby, or shell scripting.
• Experience with Brinqa or similar vulnerability management platforms.
• Exposure to Operational Technology (OT) security and vulnerability management.

Tech Stack

Tenable Security Center, Tenable, Brinqa, Windows, Linux, Azure, GCP, Python, Perl, Ruby, shell scripting

Location: Cincinnati, OH (hybrid). Schedule: must work EST hours. Compensation: USD 80 - 95 per hour. Openings: 2. Contract length: 6+ month with strong extension potential.