Security Engineering & Vulnerability Management Lead
Abacus Service Corporation· Oct 12, 2026 · 15d ago
Rock Springs, WY
In office
Full-time
Lead
$134K–$206K est.
Job description
Job Title
Security Engineering & Vulnerability Management Lead
Client Company/Dept. Name
Western Wyoming Community College
Address
2500 College Drive, E-460
City Name
Rock Springs
State Name
WY-Wyoming
Zip Code
82901
If others (Address)
Duration of the project
Project Start Date
Nov. 13, 2026
Project End Date
3-year initial term, with renewal options
Due date for Resume submission
10/15/2026
No. of Openings
1
No. of Maximum Submissions
1
Job Description
Role summary: Owns WWC's technical security controls, vulnerability management and penetration testing. Hardens the Microsoft 365 A5, Entra ID, Intune and Jamf, network and Colleague SQL environment, and turns scan and test findings into a prioritized remediation plan for WWC's systems/network administrators.
Reports to: vCISO
Works with: WWC systems/network administrators, Colleague application support, SOC & IR Lead
Location: US-based; remote, with onsite visits to Rock Springs and Green River for internal network and wireless testing
Allocation: 0.3–0.5 FTE; project surges for annual penetration testing
Key responsibilities:
• Run continuous vulnerability scanning and assessments of external and internal networks, servers, endpoints, web applications and cloud tenants.
• Lead annual external and internal penetration testing (network, web application, wireless, social engineering) and remediation retesting.
• Deliver vulnerability remediation recommendations ranked by risk and track remediation with WWC IT staff to closure.
• Run the cloud security evaluation and hardening of Microsoft 365 A5: Defender for Endpoint, Office 365 and Identity; Entra ID Conditional Access and MFA; Purview; Secure Score; CIS benchmarks.
• Harden endpoint and device management in Intune (Windows) and Jamf (macOS), including patch, encryption and configuration baselines.
• Review firewall, switch, wireless and server configurations; recommend network segmentation (student, staff, administrative and Colleague SQL zones).
• Assess Ellucian Colleague (on-prem SQL) and Canvas integration security: identity, privileged access, database hardening and backups.
• Review backup and recovery architecture to support disaster recovery and ransomware resilience.
Deliverables owned: vulnerability assessment reports, penetration test reports with an executive summary, the vulnerability remediation plan and tracker, the M365/cloud security assessment, and security configuration baselines.
Skill set info
Experience: 12+ years in security engineering, infrastructure security or offensive security
Required qualifications:
• 12+ years in information security engineering, including 5+ years running vulnerability management and penetration testing programs.
• Expert in Microsoft 365 / Azure security (Defender, Entra ID, Intune, Purview) and Jamf administration or hardening.
• Hands-on with Tenable, Qualys or Rapid7, plus Burp Suite, Nmap and Metasploit.
• Experience hardening Windows Server, SQL Server, firewalls (Palo Alto, Fortinet or Cisco) and wireless networks.
• Bachelor's degree in Cybersecurity, Computer Science or Engineering, or equivalent experience.
Preferred: penetration testing and hardening experience in colleges, universities or the public sector.
Education
Bachelor's degree in Cybersecurity, Computer Science or Engineering, or equivalent experience.
Certifications (if required)
Certifications (required: at least one of): OSCP, GIAC GPEN or GWAPT, CISSP. Preferred: Microsoft SC-100 or AZ-500, CompTIA PenTest+, CCNP Security, Jamf Certified Admin.
Documentation Required for submission
Updated Resume
Work Hours
0.3–0.5 FTE; project surges for annual penetration testing
Account Manager Name (Proposal Team)
Work authorization required
USC/GC/EAD/H1 also
Relocation is accepted
No
Remote work
Yes, remote is fine. Onsite visits to Rock Springs and Green River for internal network and wireless testing
Additional Notes if any
Candidate can be based anywhere in the US. Being located in or near Rock Springs, Wyoming is a preference only, not a requirement. Onsite visits to Rock Springs and Green River will be needed for internal network and wireless testing.
By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at Privacy Policy - Abacus .
Application prep
Use the role’s language and application details while tailoring your materials.
Keywords to mirror
sqlazureai
- Platform
- jobdiva
- Effort
- medium