[Remote] Lead, Security Engineer V&CM

Note: The job is a remote job and is open to candidates in USA. U.S. Financial Technology (U.S. FinTech) is seeking an experienced Lead, Security Engineer Vulnerability and Configuration Management to join their team of talented professionals. The role involves acting as a Subject Matter Expert for vulnerability assessments, collaborating with IT and DevOps teams, and mentoring junior analysts while ensuring compliance with security policies and best practices.ResponsibilitiesVulnerability AssessmentAct as a Subject Matter Expert for the VCM program, processes, and toolingConfigure, tune, and maintain vulnerability management toolsWork with Security Architecture on new build outs, new business, new technologies, new environments to ensure coverage of VCM programs, processes, and toolingBuild out new Security baselines for CIS, DISA STIG, and custom baselinesCorrelate Vulnerabilities with threat intelligence to assess exploitability and risk. Work with Cyber Security Operations Center to ensure mitigations are in place while vulnerabilities are being remediatedProvide detailed risk assessments for discovered vulnerabilitiesEnforce remediation timelines in accordance with Standard Operating ProceduresRemediation Tracking & ReportingCollaborate with IT and DevOps teams to ensure timely remediation of vulnerabilitiesConduct regular and ad-hoc vulnerability scans using tools like Wiz or TenableIntegrate tools with all cloud environments. Ensure complete coverage of all IT environmentsEnsure alignment with internal security policies, regulatory requirements (NIST/SOC), and industry best practicesSupport audits and assessments by providing evidence and documentationAct as a liaison between security, IT, development, and risk teamsProvide clear, actionable recommendations tailored to technical and non-technical audiencesProvide guidance and training to junior members of the VCM teamIdentify potential gaps in the vulnerability or compliance management programs and propose improvementsDevelop and maintain Standard Operating Procedures, Frameworks, and Job Aids/HowTosSkillsBachelor's Degree or equivalent required.BA/BS degree in Computer Science, Information Systems, Cyber Security or a related technical fieldMinimum of 7 years of experience with security engineering and operations, as well as experience managing and supporting large, complex mission-critical systems and with Vulnerability management tools, patching processes and tools, VM operation/workflow, or configuration/Baseline/File-integrity monitoring applications and processesApplicants must be authorized to work in the US without requiring employer sponsorship currently or in the futureSubject matter expert of cloud based critical infrastructure systems and security threats for these systems (AWS Cloud experience required)Subject matter expert with cyber security in the domains of vulnerability and compliance managementFamiliarity with latest security vulnerabilities, advisories, incidents, penetration techniques, understanding of attacks, and determination of countermeasuresSubject matter expert of network and system vulnerabilities, malware, networking protocols, multi-tiered applications, and attack methods to exploit vulnerabilitiesExperience in senior technical security role, including network security, operating system security, Internet or Web security, and vulnerability testingStrong knowledge of networking fundamentals such as TCP/IP and basic packet analysis, network engineering, and local and wide area (LAN/WAN) technologies and topologiesMust have experience conducting comprehensive vulnerability assessments with vulnerability monitoring tools (Wiz and Tenable)General knowledge and experience in Windows / Linux Operating Systems, baseline security configurations, audit, forensics, Patch Management for these OSsExperience developing Standard Operating Procedures (SOPs), job aids, and hands-on training materialsBe able to work in fast paced environment with occasional on-call activitiesExcellent interpersonal skills, presentation skills, and verbal / written communication skillsSelf-starter; adaptable to change; motivated to set personal and program goals and pro-actively track performance against goals and initiativesAbility to manage multiple priorities – projects, deliverables, and stakeholdersAbility to influence peers and management; ability to team cross-functionally and form relationships to achieve objectivesActive in the security industry; equipped with external networking relationships to maintain relevant knowledge of best practices, tactics, strategies and technologiesMaster's Degree is a plusAWS Security, AWS Architect certifications desiredBenefitsPerformance bonus401k matchHealthcare coveragePTOCompany OverviewU.S. Financial Technology is a newly launched fintech company replacing Common Securitization Solutions for mortgage securities technology. It was founded in 2014, and is headquartered in Bethesda, Maryland, USA, with a workforce of 201-500 employees. Its website is https://www.usfintech.com.