Career Cyber Risk Management Engineer - Vulnerability Management
About the position Maintains a view of IT assets and emerging vulnerabilities. Manages vulnerability scans, logs, and tracks discovered vulnerabilities in alignment with the vulnerability lifecycle. Triages remediation tasks and assigns them to system owners. Continuously tracks and reports the status of vulnerability team operational and development efforts. Develops reports, metrics, and dashboards for system owners, managers, directors, and executives. Communicates and interacts effectively and professionally with co-workers, management, internal and external customers, and partners. Communicates security solution features and options to various technical and non-technical audiences. Maintains communication with management regarding development within assigned responsibilities and performs special projects as required or requested. Develops working relationships with and offers support to other contributors in the information technology organization. Telecommuting permissible from anywhere in the US. Responsibilities • Maintains a view of IT assets and emerging vulnerabilities. • Manages vulnerability scans, logs, and tracks discovered vulnerabilities in alignment with the vulnerability lifecycle. • Triages remediation tasks and assigns them to system owners. • Continuously tracks and reports the status of vulnerability team operational and development efforts. • Develops reports, metrics, and dashboards for system owners, managers, directors, and executives. • Communicates and interacts effectively and professionally with co-workers, management, internal and external customers, and partners. • Communicates security solution features and options to various technical and non-technical audiences. • Maintains communication with management regarding development within assigned responsibilities and performs special projects as required or requested. • Develops working relationships with and offers support to other contributors in the information technology organization. Requirements • Bachelor's degree or foreign degree equivalent in Information Technology, Cybersecurity, Electronics and Telecommunications Engineering, or related field and five (5) years of progressive post baccalaureate experience in the job offered or related role. Alternatively, the employer will accept a master's degree or foreign degree equivalent in Information Technology, Cybersecurity, Electronics and Telecommunications Engineering, or related field and three (3) years of experience in the job offered or a related role. Any suitable combination of education, experience, or training acceptable. • Vulnerability management processes and lifecycle • Information security or vulnerability management technology solutions (for Network, SAST, SCA, IAST, DAST, and/or Container scanning) • Using one or more programming/scripting languages (e.g., Python, Java) • Communicating technical concepts to technical and non-technical audiences effectively • Domains where security vulnerabilities may exist (e.g., operating systems, wireless, telecommunications, networks, etc.) • Working understanding of domains where security vulnerabilities may exist (e.g., operating systems, wireless, telecommunications, networks, etc.) • Ability to conduct root cause analysis against vulnerabilities and determine feasible technical solutions. Apply tot his job