Role: Senior Mainframe Security & Vulnerability Management Engineer
Location: Remote
Type of Employment: Contract
Duration: 18 Months
Job Description:
Seeking a senior professional with 10+ years of IBM Z / z/OS security experience and 5+ years in vulnerability management. The candidate will lead mainframe vulnerability assessments, CVE reporting, patch management automation, remediation planning, and security compliance for large-scale financial services or regulated environments.
Key Responsibilities:
Coordinate with vulnerability management teams on CVE reporting, patch automation, and remediation.
Establish patching schedules, response models, escalation procedures, and validation processes.
Support SMP/E, baseline datasets, vulnerability scanning integration, and CVE reporting dashboards.
Assess vulnerabilities across z/OS, RACF, USS, CICS, MQ, Db2, JES, TCP/IP, certificates, and middleware.
Analyze exploitability, prioritize risks, validate findings, and track remediation.
Support risk acceptance reviews, compliance assessments, and AI-assisted vulnerability analysis.
Required Skills:
10+ years IBM Z security and 10+ years z/OS infrastructure experience.
5+ years vulnerability management and direct experience with CVE reporting and patch management.
Strong expertise in z/OS, RACF or Top Secret, USS, CICS, MQ, Db2, and JES2/JES3 security.
Knowledge of TCP/IP security, SSL/TLS, digital certificates, cryptographic controls, and SMF analysis.
Experience with zSecure, Compliance Event Manager, and mainframe audit tools.
Experience in financial services or other regulated environments.
Preferred Skills: STIG, NIST 800-53, CIS Benchmarks, PCI DSS, Python/REXX automation, and AI-assisted vulnerability analysis.