Senior Vulnerability Management Engineer

Kforce has a client that is seeking a Senior Vulnerability Management Engineer in Newton, MA. Responsibilities:

• Senior Vulnerability Management Engineer will support day-to-day security operations, vulnerability management, and compliance activities
• Manage vulnerability scanning, reporting, remediation tracking, and mitigation efforts
• Support PCI compliance requirements, audits, and regulatory reporting
• Prepare security reports, document findings, and maintain required compliance artifacts
• Monitor security findings and help ensure systems remain aligned with established security standards
• Identify inefficient or manual processes and implement automation to improve security operations
• As a Senior Vulnerability Management Engineer, you will partner with technical teams to address vulnerabilities, compliance gaps, and security risks
• Present findings, recommendations, and improvement opportunities to technical and business stakeholders
• Help strengthen monitoring, reporting, and operational processes across the security environment

Requirements:

• 3+ years of experience in Security Engineering, Security Operations, Compliance, or Vulnerability Management
• Strong hands-on experience with PCI compliance
• Experience managing vulnerability identification, reporting, remediation, and mitigation
• Experience preparing compliance documentation, security reports, and audit materials
• Familiarity with security technologies such as Tenable, Zscaler, Akamai, or similar platforms
• Strong understanding of security controls, patching, policy adherence, and risk remediation
• Strong technical troubleshooting and analytical skills
• Self-directed with the ability to learn new environments and solve problems independently
• Strong communication skills with the ability to clearly present security risks and recommendations
• Ability to identify opportunities for process improvement and automation
• Experience supporting retail, hospitality, restaurant, payment, or other PCI-focused environments is a plus