Vulnerability Engineer (Contract)

Location: Greater Phoenix Area (Onsite/Hybrid)
Duration: Contract (Potential Extension)
Industry: Financial Services / Banking

Overview

A leading financial services organization is seeking a Vulnerability Engineer to support a high-volume, fast-paced security operations environment. This role is focused on driving remediation outcomes, not just identifying issues.

You’ll take ownership of the vulnerability lifecycle—from intake and validation through remediation coordination, exception handling, and closure—while working closely with infrastructure, application, and security teams.

This position requires someone who can operate independently, manage competing priorities, and push remediation efforts forward without constant oversight.

Key Responsibilities

• Own the end-to-end lifecycle of security vulnerabilities, including validation, prioritization, assignment, tracking, and closure
• Execute and coordinate remediation efforts such as patching, configuration updates, and compensating controls
• Partner with infrastructure and application teams to ensure timely resolution aligned with defined SLAs
• Track and manage vulnerability aging, escalation paths, and remediation risks
• Manage workflows, assignments, and closure evidence
• Analyze findings from tools such as Rapid7 and Wiz to determine appropriate remediation actions
• Facilitate risk acceptance and exception processes, ensuring proper documentation and approvals
• Validate remediation efforts and maintain audit-ready documentation
• Develop and maintain dashboards and reporting using tools like Power BI
• Provide regular updates to stakeholders on remediation status, risks, and timelines
• Identify process gaps and contribute to continuous improvement of vulnerability management workflows

Required Qualifications

• 5+ years of experience in vulnerability management, security operations, or infrastructure security
• Strong hands-on experience with vulnerability remediation (patching, configuration changes, validation)
• Proven experience using for managing vulnerability workflows
• Experience with vulnerability scanning and exposure management tools (e.g., Rapid7, Wiz, or similar)
• Familiarity with SLA-driven environments and remediation tracking
• Ability to analyze vulnerability data and translate findings into actionable remediation plans
• Strong communication skills with the ability to coordinate across multiple technical teams

Preferred Qualifications

• Experience within financial services or other regulated environments
• Exposure to audit and compliance frameworks (e.g., PCI-DSS, SOX, NIST)
• Experience building or maintaining reporting dashboards (e.g., Power BI)
• Knowledge of cloud and hybrid infrastructure security