Resumo da vaga

Lead, Security Engineer V&CM

Requisitos e responsabilidades

Conteúdo da vaga extraído em seções para revisão mais rápida.

Key Job Functions

  • Vulnerability Assessment
  • Act as a Subject Matter Expert for the VCM program, processes, and tooling.
  • Configure, tune, and maintain vulnerability management tools
  • Work with Security Architecture on new build outs, new business, new technologies, new environments to ensure coverage of VCM programs, processes, and tooling.
  • Build out new Security baselines for CIS, DISA STIG, and custom baselines.
  • Correlate Vulnerabilities with threat intelligence to assess exploitability and risk. Work with Cyber Security Operations Center to ensure mitigations are in place while vulnerabilities are being remediated
  • Provide detailed risk assessments for discovered vulnerabilities.
  • Enforce remediation timelines in accordance with Standard Operating Procedures. Remediation Tracking & Reporting
  • Remediation Tracking & Reporting
  • Collaborate with IT and DevOps teams to ensure timely remediation of vulnerabilities
  • Conduct regular and ad-hoc vulnerability scans using tools like Wiz or Tenable
  • Integrate tools with all cloud environments. Ensure complete coverage of all IT environments.
  • Ensure alignment with internal security policies, regulatory requirements (NIST/SOC), and industry best practices.
  • Support audits and assessments by providing evidence and documentation. Stakeholder Engagement
  • Stakeholder Engagement
  • Act as a liaison between security, IT, development, and risk teams
  • Provide clear, actionable recommendations tailored to technical and non-technical audiences. Mentor Junior Analysts
  • Mentor Junior Analysts
  • Provide guidance and training to junior members of the VCM team. Process Improvements
  • Process Improvements
  • Identify potential gaps in the vulnerability or compliance management programs and propose improvements.
  • Develop and maintain Standard Operating Procedures, Frameworks, and Job Aids/HowTos.

Details

  • Remediation Tracking & Reporting
  • Stakeholder Engagement
  • Mentor Junior Analysts
  • Process Improvements

Education

  • Bachelor's Degree or equivalent required.BA/BS degree in Computer Science, Information Systems, Cyber Security or a related technical field. Master’s Degree is a plus.

Minimum Experience

  • Minimum of 7 years of experience with security engineering and operations, as well as experience managing and supporting large, complex mission-critical systems and with Vulnerability management tools, patching processes and tools, VM operation/workflow, or configuration/Baseline/File-integrity monitoring applications and processes.
  • Applicants must be authorized to work in the US without requiring employer sponsorship currently or in the future. U.S. FinTech does not offer H-1B sponsorship for this position.

Specialized Knowledge & Skills

  • Subject matter expert of cloud based critical infrastructure systems and security threats for these systems (AWS Cloud experience required)
  • Subject matter expert with cyber security in the domains of vulnerability and compliance management.
  • Familiarity with latest security vulnerabilities, advisories, incidents, penetration techniques, understanding of attacks, and determination of countermeasures.
  • Subject matter expert of network and system vulnerabilities, malware, networking protocols, multi-tiered applications, and attack methods to exploit vulnerabilities.
  • Experience in senior technical security role, including network security, operating system security, Internet or Web security, and vulnerability testing.
  • Strong knowledge of networking fundamentals such as TCP/IP and basic packet analysis, network engineering, and local and wide area (LAN/WAN) technologies and topologies.
  • Must have experience conducting comprehensive vulnerability assessments with vulnerability monitoring tools (Wiz and Tenable).
  • General knowledge and experience in Windows / Linux Operating Systems, baseline security configurations, audit, forensics, Patch Management for these OSs.
  • Experience developing Standard Operating Procedures (SOPs), job aids, and hands-on training materials.
  • Be able to work in fast paced environment with occasional on-call activities.
  • Excellent interpersonal skills, presentation skills, and verbal / written communication skills.
  • Self-starter; adaptable to change; motivated to set personal and program goals and pro-actively track performance against goals and initiatives.
  • Ability to manage multiple priorities – projects, deliverables, and stakeholders.
  • Ability to influence peers and management; ability to team cross-functionally and form relationships to achieve objectives.
  • Active in the security industry; equipped with external networking relationships to maintain relevant knowledge of best practices, tactics, strategies and technologies.
  • AWS Security, AWS Architect certifications desired.
Vagas similares

Mantenha uma lista reserva.

Ver stack
FocoInformation SecurityÁrea da vaga
Sinal de senioridadeSeniorNível do candidato
StackAWSSkills principais
Localização1 país aceitoElegibilidade

Stack

Use estas tags para comparar vagas remotas similares.

Elegibilidade de localização

Candidatos devem aplicar apenas quando o país do perfil estiver listado aqui.

Seu perfilPaís não definidoEntre para comparar seu país com esta vaga.

Fluxo de contratação

O WithMira mostra a vaga e depois envia candidatos para a aplicação da empresa.

1Confira fit da vaga, stack e elegibilidade de localização no WithMira.
2Abra a página de aplicação da empresa pelo link rastreado.
3Salve a vaga ou assine oportunidades similares antes de sair.
Aplicar no site da empresaSite da empresaAbrir link