Job Title: Vulnerability Management and Configuration Assurance (VMCA) EngineerWork Location & Reporting Address: The resource is required to work from Springfield, MA or Boston, MA or New York, NY office of client three days in a week. (Hybrid)Vendor Rate: 59.90Contract duration: 12 monthsTarget Start Date: 25 Aug 2026Does this position require Visa independent candidates only? YesInterview mode - In person/Virtual: VirtualHow many rounds of interview: 1 or 2Job Details:Mandatory skills: This role is responsible for driving end-to-end ownership of tooling, integrations, and processes that enable comprehensive visibility into vulnerabilities and configuration risks across on-premises, cloud, and hybrid environments.Minimum years of experience needed in the required skills: 8-10 yearsMinimum over all work experience required: 8-10 yearsDomain: Cyber SecurityAny certification required: NADetailed Job Description: The engineer ensures that vulnerability and configuration data is accurate, complete, and actionable, enabling risk-based prioritization and effective remediation across the enterprise. This includes oversight of vulnerability management platforms, troubleshooting tool issues, and collaborating with cross-functional teams to enhance detection, reporting, and response capabilities. In addition, the VMCA Engineer develops and maintains scalable dashboards, metrics, and executive reporting to provide transparency into risk posture, remediation progress, and control effectiveness. The role is instrumental in driving automation, process improvement, and governance alignment, ensuring compliance with regulatory frameworks such as NIST, CIS, ISO, and NY DFS. As a senior technical resource, the engineer provides subject matter expertise, mentoring, and strategic guidance, translating complex technical risks into clear, actionable insights for both technical teams and executive leadership. Technical Skills: Vulnerability Management Platforms: Deep hands-on experience managing and optimizing enterprise tools (e.g., Qualys, Wiz, Nessus, Rapid7), including platform configuration, performance tuning, and data quality management. Tooling Integration & Engineering: Experience designing and implementing integrations between vulnerability platforms and enterprise systems (e.g., ServiceNow CMDB, SecOps, SIEM) to support automated workflows and governance processes. Automation & Scripting: Strong proficiency in automation and orchestration using scripting languages (e.g., Python, PowerShell) to streamline scanning, reporting, and remediation processes. Configuration Assurance & Secure Baselines: Advanced understanding of operating systems, secure configuration baselines, and continuous compliance validation across enterprise infrastructure. Data Analytics & Reporting: Ability to develop and maintain dashboards and metrics that provide insight into vulnerability trends, remediation performance, and risk posture for both technical and executive audiences. Cloud & Infrastructure Security: Experience securing modern environments, including cloud platforms (AWS, Azure, GCP) and hybrid infrastructures, with a focus on vulnerability and configuration risk management. Troubleshooting & Platform Optimization: Strong ability to identify tool defects, perform root cause analysis, and work with vendors to resolve issues and improve platform effectiveness.The current opening is for the engineering side of the team, which is responsible for administering and supporting our vulnerability scanning and reporting platforms, including Qualys and ServiceNow Vulnerability Response and Configuration Compliance. We are looking for a candidate who can step into the role quickly with minimal onboarding and help stabilize and optimize these tools and related processes.
Project Code: Mobile Device Vulnerability Management a
IT - Senior Consultant | Application Security | Vulnerability Management • Boston, MA, United States
Risk Consulting - Digital Risk - Senior Consultant - Power & Utilities - Open Location.Location: New York Other locations: Anywhere in Region Salary: Competitive Date: Aug 4, 2026.At EY, we're all ... Show more
Patient Access Workflow Support Specialist.We are seeking a candidate with in-depth experience supporting Patient Access workflows across both inpatient and outpatient settings, with strong knowled... Show more
A global payments technology company is seeking a Senior Managing Consultant for their Security Solutions team in Boston.This role involves leading sales relationships with major merchants, driving... Show more
The Asset Protection Specialist is primarily responsible for preventing financial loss caused by theft and fraud and supporting safety and environmental program compliance in their assigned store/m... Show more
Activity Security Representative (ASR) III.Transform technology into opportunity as a Activity Security Representative (ASR) III with GDIT.A career in enterprise IT means connecting and enhancing t... Show more
Job Type :RegularTime Type :Full timeWork Shift :Day (United States of America)FLSA Status :ExemptWhen you join the growing BILH team, you're not just taking a job, you're making a difference in pe... Show more
Shaw's - JobID: 697588 [Loss Prevention / Security] As an Asset Protection Specialist at Shaw's, you'll: Prevent loss and control shrink by monitoring various areas of the store for fraud, complian... Show more
Senior Principal Risk Specialist, Cyber Engagements.About FINRA FINRA (Financial Industry Regulatory Authority) is the largest independent regulator of securities firms doing business in the United... Show more
Job Family: BuildingsReq ID: 495986Here at Siemens, we take pride in enabling sustainable progress through technology.We do this through empowering customers by combining the real and digital world... Show more
Supporting key programmatic initiatives in existing and emerging systems.Acting as a Subject Matter Expert (SME) for EHS-IT, the Senior IT Project Manager will oversee multiple large, complex IT pr... Show more
The Director of Safety & Security collaborates with the Director of Operations, Chief Pilot, Chief Flight Instructor, Director of Maintenance, and Executive Vice President to develop and execute th... Show more
A Day in the Life: As the Asset Protection Specialist, no one day is ever the same! You are focused on preventing loss and controlling shrink by monitoring various areas of the store for fraud, com... Show more
At Johnson & Johnson, we believe health is everything.Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments a... Show more
Visionary Leader In Application Security.Berkshire Hathaway Specialty Insurance (BHSI) is looking for a visionary leader in Application Security to join our Boston-based team.This is your opportuni... Show more
Consultant / Senior ConsultantAlpha Alternatives (formerly Lionpoint Group), an Alpha FMC company, is a global consulting firm focused on delivering operational transformation and enabling technolo... Show more
The Asset Protection Specialist is primarily responsible for preventing financial loss caused by theft and fraud and supporting safety and environmental program compliance in their assigned store/m... Show more
CyberSecurity Enterprise Solutions Architect - RemoteSeeking a highly motivated individual to help expand our organization.Working with file analysis and / or malware analysis, reverse engineering ... Show more
Senior Discovery IT System Administrator.Employment Type: Full-Time, Executive-Level.CGS is seeking a dedicated Senior Discovery IT System Administrator to join a fast-paced and hard-working team t... Show more
Work Study Residential Safety Assistant.Residence Life & Housing provides a safe, inclusive, & quality residential experience where access to programs, services, & staff fosters a sense of communit... Show more
Senior Client Services Specialist.UL Solutions is seeking a Senior Client Services Specialist to join our team in Canton, MA.This hybrid role requires working on-site three days per week.In this ro... Show more
){kind=logo}
