Security Engineer (Mid-level)

Overview

Remote
On Site
Hybrid
BASED ON EXPERIENCE
Contract - W2
Contract - Independent
Contract - 2+ mo(s)

Skills

Vulnerability Assessment
Risk Assessment
Management
Collaboration
Asset Management
Qualys
Unix
Linux
IBM AIX Administration
Computer Networking
Microsoft Windows
Active Directory
Group Policy
Endpoint Protection
Hardening
Regulatory Compliance
Soft Skills
Communication
Organized
Documentation
Reporting
Information Security
Security Engineering
Vulnerability Management
Event Management
Workflow
SIEM
Splunk
IBM QRadar
Professional Services
Privacy
Artificial Intelligence

Job Details

Title: Security Engineer Mid-Level (2-3 years experience, 1+ year of Splunk or other SIEM tools)
Location: Remote (Work within regular US hours)
Duration: Contract ends 3/31/2026
Compensation: $58-70/hr
Work Requirements: , Holders or Authorized to Work in the U.S. (No C2C)

Role Summary

This role partners closely with the Information Security team to plan, execute, and report on vulnerability and policy compliance assessments across the enterprise. The individual will operate and administer vulnerability management tools, validate findings, support remediation efforts, and help maintain security standards and compliance controls.

Key Responsibilities

Vulnerability & Compliance Assessments

  • Participate in planning, development, and execution of vulnerability and policy compliance assessments

  • Configure and manage enterprise vulnerability assessment tools, including internal and external scans

  • Analyze detected vulnerabilities, identify relevant threats, and eliminate false positives through manual validation

  • Perform threat, vulnerability, and risk assessments against enterprise environments

Tooling & Process Ownership

  • Administer and maintain Qualys, with emphasis on:

    • QualysGuard Policy Compliance

    • Building and managing custom compliance controls

  • Create, document, and update procedures for vulnerability and compliance assessment processes

  • Maintain procedures for proper use of assessment tools

Reporting & Remediation Support

  • Generate assessment reports and summarize findings for operational teams

  • Track and report on:

    • Assessment completion status

    • Remediation progress

    • Effectiveness and performance of assessment tools

  • Support operational teams by providing clear, actionable remediation guidance

Standards, Controls & Governance

  • Review, update, and maintain security standards

  • Create and maintain compliance controls aligned to company security standards

  • Ensure alignment with industry and government frameworks (e.g., NIST, CIS)

  • Support compliance reporting and vulnerability management best practices

Collaboration & Asset Management

  • Work with operations teams and stakeholders to:

    • Build and maintain asset inventories

    • Define asset grouping and scoping for assessments

Required Skills & Experience

Core Technical Skills

  • Hands-on experience with vulnerability and compliance assessments using Qualys

    • Qualys administration experience preferred

    • Recent experience with QualysGuard Policy Compliance

    • Experience building custom compliance controls

  • Solid working knowledge of Unix/Linux environments

    • Linux and/or AIX administration experience is a plus

  • Strong understanding of:

    • Windows networking

    • Windows domains and Active Directory

    • Group Policy Objects (GPOs)

    • Endpoint security

  • Experience performing system hardening based on security standards

Security Knowledge

  • Familiarity with:

    • Vulnerability management lifecycle

    • Compliance reporting

    • Security best practices

  • Knowledge of industry and government security standards (NIST, CIS, etc.)

Soft Skills

  • Strong verbal and written communication skills

  • Ability to clearly present findings to technical and non-technical stakeholders

  • Well-organized with strong documentation and reporting skills

Experience Requirements (Updated)

  • 2-3 years of overall experience in information security, security engineering, vulnerability management, or a related technical role

  • At least 1 year of hands-on experience working with Splunk or other SIEM / Security Information & Event Management tools

    • Developing or tuning searches, alerts, or security content

    • Supporting monitoring, detection, or investigation workflows

Optional (Nice-to-Have) Add-On if You Want Slight Flexibility

Experience with SIEM platforms such as Splunk, QRadar, Sentinel, or similar security monitoring tools.

About INSPYR Solutions
INSPYR Solutions is a national expert in delivering flexible technology and talent solutions. We strategically align industry and technical expertise with our clients business objectives and cultural needs, delivering professional services, project solutions, and talent solutions tailored to each engagement.
INSPYR Solutions provides equal employment opportunities to all employees and applicants and complies with all applicable federal, state, and local nondiscrimination laws.

Information collected and processed through your application with INSPYR Solutions (including any job applications you choose to submit) is subject to INSPYR Solutions Privacy Policy and INSPYR Solutions AI and Automated Employment Decision Tool Policy: . By submitting an application, you are consenting to being contacted by INSPYR Solutions through phone, email, or text.


Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

About INSPYR Solutions