Vulnerability Engineer - Remote Eligible

Cybersecurity Engineer - Remote

ARC Group has an immediate opportunity for a Cybersecurity Engineer! This position is 100% remote working eastern time zone business hours. This is starting out as a contract position running through December 2025 with strong potential to extend longer or convert to FTE. This is a fantastic opportunity to join a well-respected organization offering tremendous career growth potential. At ARC Group, we are committed to fostering a diverse and inclusive workplace where everyone feels valued and respected. We believe that diverse perspectives lead to better innovation and problem-solving. As an organization, we embrace diversity in all its forms and encourage individuals from underrepresented groups to apply. Candidates must currently have PERMANENT US work authorization. Sorry, but we are not considering any candidates from outside companies for this position (no C2C, 3rd party/brokering).

We are seeking a highly skilled Cybersecurity Engineer to join our team, with a focus on web application security, threat protection, and vulnerability analysis. As a key member of the cybersecurity team, you will be responsible for implementing and managing web application firewalls, bot protection systems, and vulnerability scanning tools to ensure the security and integrity of the organization's web applications and data. In addition, you will be responsible for analyzing and helping developers in remediating vulnerabilities and staying up-to-date with emerging threats and technologies to continuously improve our security posture.

Essential Functions

• Implement and manage web application firewalls (WAFs) and bot protection systems to detect and prevent malicious traffic and attacks.
• Manage vulnerability scanning tools and technologies to identify and remediate vulnerabilities in web applications and systems.
• Develop and maintain policies and procedures for web application security, including WAF configuration, bot protection, and vulnerability management.
• Collaborate with cross-functional teams to ensure WAFs and bot protection systems are integrated with other security systems and applications.
• Develop and maintain documentation for WAFs and bot protection systems, including technical guides, policies, and procedures.
• Provide training and support to other teams regarding vulnerability findings and remediation.
• Stay up-to-date with industry trends and emerging threats, and recommend improvements to web application security infrastructure and systems.
• Perform vulnerability management for web applications, including: Dynamic scanning using tools such as HCL AppScan and/or Burp Suite.
• Static scanning throughout the development lifecycle.
• Identifying and prioritizing vulnerabilities based on risk and impact.
• Collaborating with development teams to remediate vulnerabilities and implement secure coding practices.
• Conducting regular web application security testing and providing recommendations for improvement.

Additional Required Qualifications

• 4+ years of experience in vulnerability management, with a strong understanding of web application vulnerabilities and remediation methods.
• Experience with application vulnerability scanning software and/or platforms such as HCL AppScan, BurpSuite, Zed Attack Proxy, Nessus, etc.
• Excellent problem-solving skills, with the ability to analyze complex technical issues and develop creative solutions.
• Strong communication and collaboration skills, with the ability to work effectively with cross-functional teams.
• Experience with web application security testing and vulnerability management.

Required Work Experience • 4+ years related work experience (at least 4 years Cybersecurity / 1 year Infrastructure/Development)

Required Licenses and Certifications • SSCP (or greater) certification required within 180 days of hire.

Preferred Qualifications • Experience with F5 web application firewalls. • Knowledge of scripting languages, such as PowerShell or Python. • Experience with agile development methodologies and DevOps practices.

Would you like to know more about our new opportunity? For immediate consideration, please send your resume directly to Suresh Gaddala at Suresh@arcgonline.com.