remote
Information Security Engineer - Eliassen Group
Security Engineer
Senior Information Security Engineer focused on enterprise vulnerability management and application security, driving intake, triage, validation, and remediation across a remote financial services environment.
About the role
Key Responsibilities
- Lead vulnerability intake, triage, and validation for enterprise systems and applications.
- Coordinate remediation efforts with development, operations, and third‑party teams.
- Maintain and enhance vulnerability management tooling (e.g., Nessus, Qualys) and reporting dashboards.
- Conduct risk assessments and produce actionable security recommendations.
- Support application security testing, including static and dynamic analysis.
- Document findings, track progress, and ensure compliance with industry standards.
Requirements
- 5+ years of experience in information security, with a focus on vulnerability management and application security.
- Proficiency with vulnerability scanners, SIEM, and ticketing systems.
- Strong analytical skills and ability to translate technical findings into business‑friendly language.
- Excellent communication and collaboration skills for cross‑functional teams.
- Relevant certifications (e.g., CISSP, CEH, OSCP) preferred.
Skills
siemiampenetration testing