Senior Mainframe Security & Vulnerability Management Engineer

Job Description

Seeking a senior professional with 10+ years of IBM Z / z/OS security experience and 5+ years in vulnerability management. The candidate will lead mainframe vulnerability assessments, CVE reporting, patch management automation, remediation planning, and security compliance for large-scale financial services or regulated environments.

Key Responsibilities

• Coordinate with vulnerability management teams on CVE reporting, patch automation, and remediation.
• Establish patching schedules, response models, escalation procedures, and validation processes.
• Support SMP/E, baseline datasets, vulnerability scanning integration, and CVE reporting dashboards.
• Assess vulnerabilities across z/OS, RACF, USS, CICS, MQ, Db2, JES, TCP/IP, certificates, and middleware.
• Analyze exploitability, prioritize risks, validate findings, and track remediation.
• Support risk acceptance reviews, compliance assessments, and AI-assisted vulnerability analysis.

Required Skills

• 10+ years IBM Z security and 10+ years z/OS infrastructure experience.
• 5+ years vulnerability management and direct experience with CVE reporting and patch management.
• Strong expertise in z/OS, RACF or Top Secret, USS, CICS, MQ, Db2, and JES2/JES3 security.
• Knowledge of TCP/IP security, SSL/TLS, digital certificates, cryptographic controls, and SMF analysis.
• Experience with zSecure, Compliance Event Manager, and mainframe audit tools.
• Experience in financial services or other regulated environments.

Preferred Skills

STIG, NIST 800-53, CIS Benchmarks, PCI DSS, Python/REXX automation, and AI-assisted vulnerability analysis.