SOC Security Engineer / Vulnerability Management Specialist

Engagement Type: Contract-to-Hire
Location: Hybrid, Wayne, NJ area

Overview

We are seeking a Security Engineer to work closely alongside the SOC team as a key contributor to day-to-day security operations. This is an entry-to-mid-level opportunity for someone with a strong security foundation and a genuine interest in growing into penetration testing, vulnerability management, and incident response.

The role will provide some support around PCI compliance as needed, but the primary focus is hands-on cybersecurity operations rather than compliance administration.

This position will begin as a consultant/contract role, with the potential to convert to a full-time internal position based on future business needs and headcount approval.

What You'll Do

• Support day-to-day SOC operations, including security monitoring and alert triage.

• Assist with incident response activities, including identifying, escalating, and helping contain security incidents.

• Perform vulnerability management, including scanning, tracking remediation, and coordinating with infrastructure and application teams to close security gaps.

• Gain hands-on exposure to penetration testing methodologies and tools, with room to grow into this area over time.

• Help maintain baseline security hardening across Windows, Linux, and cloud environments.

• Provide backup support during PCI audit cycles when coordination or documentation assistance is needed.

• Partner closely with the security operations team to improve processes and support higher-level security initiatives.

Who You Are

• Foundational professional experience in cybersecurity. Entry-level candidates with relevant hands-on exposure will be considered.

• Strong interest in building a long-term career specifically in cybersecurity, particularly SOC operations, incident response, vulnerability management, and penetration testing.

• Basic familiarity with security fundamentals across Windows, Linux, and cloud environments such as AWS or Azure.

• Comfortable learning new security tools, technologies, and processes.

• Strong communication and follow-through, with the ability to coordinate with stakeholders and drive issues through resolution.

• Collaborative team-player mindset and comfort working closely with other security professionals.

Nice to Have

• Exposure to penetration testing tools, labs, or coursework.

• Familiarity with PCI DSS or compliance audit processes.

• Relevant security certifications such as Security+, CEH, or similar.

#LI-CW1