Cyber Security Engineer

Cyber Security Engineer

Location: Charlotte, NC - Hybrid, 3 days onsite

Employment Type: Contract with potential for extension or conversion

About the Role

Brooksource is seeking a Cyber Security Engineer to join an enterprise Vulnerability Management team supporting a large financial services organization in Charlotte, NC. This is an excellent opportunity for an early-career cybersecurity professional to gain hands-on experience within a complex enterprise security environment while working alongside experienced engineers.

In this role, you will help support the day-to-day health and operation of enterprise vulnerability management tools and integrations. You will assist with vulnerability scanning infrastructure, troubleshoot technical issues, identify gaps in scanning coverage, support remediation efforts, and contribute to automation initiatives designed to improve operational efficiency and reporting.

The ideal candidate has foundational experience with vulnerability management or vulnerability scanning, an understanding of scripting and APIs, and a natural curiosity for understanding how security technologies work together.

Responsibilities

• Support the daily operation and health of enterprise vulnerability management tools, scans, jobs, and integrations.
• Monitor automated processes and troubleshoot scanning or integration failures as they arise.
• Assist with the configuration and ongoing engineering of vulnerability scanning infrastructure.
• Perform regular scan-scope reconciliation to identify gaps in asset and vulnerability scanning coverage.
• Investigate technical issues and partner with infrastructure, security, and technology teams to drive resolution.
• Support change-management activities associated with vulnerability management tooling and production environments.
• Assist with maintaining and enhancing existing automation using Python, REST APIs, or similar technologies.
• Contribute to new automation efforts that improve health monitoring, reporting, and operational processes.
• Support vulnerability reporting, dashboards, and documentation used by security and technology stakeholders.
• Assist the team as it continues to expand its vulnerability and exposure-management capabilities across the enterprise.

Qualifications

• 1-3 years of experience in cybersecurity, vulnerability management, IT operations, or a related technical field.
• Hands-on experience with an enterprise vulnerability scanning or vulnerability management platform such as Qualys, Tenable, Nessus, Rapid7, or a comparable technology.
• Foundational scripting or automation experience using Python, PowerShell, Bash, or similar technologies.
• Familiarity with REST APIs and an understanding of how APIs can be used to integrate or automate technology platforms.
• Basic understanding of vulnerability management concepts, including vulnerability scanning, remediation, CVEs, and severity/risk prioritization.
• Strong troubleshooting and problem-solving skills with an interest in understanding how systems and technologies work.
• Ability to communicate effectively and collaborate with technical teams across an enterprise environment.

Preferred Qualifications

• Hands-on experience with Qualys or Qualys VMDR.
• Experience troubleshooting or supporting integrations between security platforms and ITSM tools such as ServiceNow.
• Exposure to cloud security, attack surface management, or exposure management technologies.
• Experience creating or maintaining technical reporting and dashboards, including Power BI.
• Familiarity with Continuous Threat Exposure Management (CTEM) concepts or programs.
• Relevant cybersecurity certifications such as Security+, CySA+, or vendor-specific vulnerability management certifications.

What Makes Someone Successful in This Role

This team values engineers who are naturally inquisitive and willing to dig into technical problems. You do not need to be an expert in every tool on day one. Success in this role comes from having a strong technical foundation, asking thoughtful questions, taking ownership of problems, and having the persistence to investigate how and why something works-or why it isn't working.