Security Engineer – Cyber Advisory Support
Role Overview
We are seeking a Security Engineer – Cyber Advisory Support contractor to provide advisory and hands-on support for client cybersecurity programs. This role will assist with the implementation, configuration, and operationalization of security controls, with a focus on vulnerability management, asset inventory, configuration management, authenticated scanning, remediation validation, and CMDB accuracy across infrastructure, cloud, and application environments.
The ideal candidate has hands-on experience with vulnerability scanning platforms, strong troubleshooting ability, and the communication skills needed to work across security, infrastructure, application, and business teams in complex enterprise environments.
Key Responsibilities
- Support the configuration, maintenance, and operation of vulnerability scanning platforms, including scanner deployment, scanner configuration, scan scheduling, and coverage across internal and external environments.
- Compile, validate, and maintain IT asset inventories to support authenticated vulnerability scanning.
- Coordinate with infrastructure, cloud, application, and security teams to confirm asset ownership, scan scope, access requirements, and inventory accuracy.
- Create, manage, and troubleshoot authentication records and credentials required for authenticated vulnerability scans.
- Perform discovery scans, validation scans, and coverage reviews to ensure complete and accurate asset visibility.
- Troubleshoot scanning issues related to authentication failures, infrastructure constraints, scan windows, scan schedules, tooling changes, and scanner performance.
- Update asset and configuration data in the CMDB following scanning activities to ensure alignment with enterprise inventory records.
- Support vulnerability remediation activities by validating fixes through rescans and advising on compensating controls when remediation cannot be completed immediately.
- Assist with emergency patching efforts and remediation validation in coordination with vulnerability management, infrastructure, application, and IT operations teams.
- Document scanner configurations, operational procedures, scan results, troubleshooting steps, findings, and recommendations.
- Support audit readiness and knowledge transfer through clear documentation and repeatable procedures.
- Provide recommendations to improve scanning coverage, configuration management practices, authenticated scan reliability, asset inventory quality, and overall vulnerability management effectiveness.
- Communicate technical findings clearly to both technical and non-technical stakeholders.
Required Qualifications
- 4+ years of experience in security engineering, vulnerability management, security operations, or a closely related cybersecurity role.
- Hands-on experience configuring and operating vulnerability scanning tools.
- Strong understanding of vulnerability scanning, authenticated scanning, asset management, configuration management, and vulnerability validation.
- Familiarity with CMDB processes and enterprise asset inventory practices.
- Experience troubleshooting scan failures, authentication issues, scan coverage gaps, or tooling-related vulnerability management issues.
- Ability to work with infrastructure, cloud, application, security, and operations teams to support vulnerability management activities.
- Ability to communicate technical findings clearly to both technical and non-technical stakeholders.
- Strong documentation, and troubleshooting skills.
- Experience supporting large, complex enterprise environments
- Strong written documentation, reporting, knowledge transfer, and stakeholder communication skills.
Preferred Qualifications
- Consulting or client-facing advisory experience.
- Ability to work across multiple industries and technology stacks.
- Experience supporting vulnerability remediation, emergency patching, or remediation validation efforts.
- Experience improving scanning coverage, CMDB accuracy, or vulnerability management operational processes.
Job Types: Full-time, Contract
Base Pay: From $62.00 per hour
Application Question(s):
- Are you eligible to work as a direct 1099 contractor (no W2 or C2C arrangements)? Please indicate your eligibility by typing 'Yes' or 'No'. Note – This question is required. Failure to answer may result in disqualification
Experience:
- Vulnerability Scanner Tool Configuration: 2 years (Required)
- Enterprise Security engineering: 5 years (Required)
- Vulnerability management: 2 years (Required)
- CMDB: 1 year (Preferred)
Work Location: Remote