What are the responsibilities and job description for the SR VULNERABILITY MANAGEMENT ENGINEER position at Holistic Partners, Inc?
Job Title: SR VULNERABILITY MANAGEMENT ENGINEER
Location : NEWTON, MA (HYBRID/3 DAYS WEEK)
Duration:: 3-6 months
Interview: Virtual
Must-Haves
- Hands-on Vulnerability Management experience (running VM programs, vulnerability scanning, remediation tracking, reporting, and risk management).
- Strong PCI Compliance experience with ownership of audits, evidence collection, security controls, compliance reporting, and remediation efforts.
- Security Engineering or Security Operations background with ability to perform day-to-day compliance and security tasks independently.
- Process improvement and automation mindset; experience identifying manual processes and implementing efficiencies/workflow automation.
- Experience with security tools such as Tenable, Zscaler, Akamai, or similar vulnerability/security platforms, plus strong communication skills for presenting findings to leadership.
Nice-to-Haves
- Retail, restaurant, hospitality, or other PCI-heavy industry experience.
- Experience supporting Data Subject Requests (DSRs) including "Do Not Sell" and "Do Not Share" compliance requirements.
- Security audit management experience including artifact collection, audit readiness, and addressing audit findings.
- Executive-facing communication skills with experience presenting risks, findings, and recommendations to senior leadership/C-level stakeholders.
- Contract-to-hire mentality and ability to thrive in a lean team environment with minimal direction and a self-starter approach.