Tranzeal is an industry leading global Business Transformation Service Provider offering specific consulting services as well as prepackaged, industry specific solutions and services to companies around the world. Our Consulting Services are dedicated to helping our clients maximize their investments in IT and the overall effectiveness and efficiency of the business. Tranzeal s deep industry experience makes us the partner of choice for a growing number of Fortune 1000 companies, midsize enterprises and small businesses worldwide.

We are currently looking for ''Senior Cyber Risk Management Engineer'' to support one of our clients with the following skills:

Requirement:

Senior Cyber Risk Management Engineer

Location: Remote
Duration: 12+ Months | Contract-to-Hire
Schedule: Monday–Friday, 8 hours/day | Core Hours: 10 AM–2 PM PST
Bill Rate: DOE

Job Summary

We are seeking a Senior Cyber Risk Management Engineer with strong hands-on experience in Vulnerability Management, Cyber Risk Management, and Infrastructure Security. The candidate will investigate and validate vulnerabilities, coordinate remediation, manage risk acceptance, and work closely with engineering teams and technology leadership.

Key Responsibilities

• Investigate, validate, and prioritize vulnerabilities across enterprise infrastructure and technology environments.
• Analyze CVEs, CVSS, exploitability, affected versions, patches, mitigations, and false positives.
• Use vulnerability management tools such as Rapid7 InsightVM/Nexpose, Qualys, and Nucleus.
• Coordinate vulnerability remediation with Infrastructure, Middleware, DevOps, Network, and Security teams.
• Create vulnerability advisories, remediation tickets, and risk acceptance documentation.
• Track remediation activities and ensure vulnerabilities are addressed within established SLAs.
• Support risk acceptance/exception processes and communicate residual risk to stakeholders.
• Research vulnerability intelligence including CISA KEV, EPSS, vendor advisories, and other security sources.
• Communicate effectively with both technical engineers and technology leadership.

Required Qualifications

• 8+ years of experience in Vulnerability Management, Cyber Risk Management, Infrastructure Security, or related cybersecurity roles.
• Strong knowledge of CVEs, CVSS, vulnerability validation, exploitability, remediation, mitigation, and risk assessment.
• Hands-on experience with Rapid7, Qualys, Nucleus, or comparable vulnerability management platforms.
• Strong understanding of enterprise infrastructure, operating systems, networking, middleware, servers, and DevOps technologies.
• Experience coordinating remediation with technical engineering teams.
• Strong analytical, organizational, communication, and stakeholder-management skills.