Senior Vulnerability Management Engineer

What you'll do

• Manage and maintain vulnerability management platforms and tools to ensure successful operations and resolve technical issues.
• Lead efforts to define and implement processes, policies, and procedures to govern vulnerability remediation.
• Track open vulnerabilities from identification to resolution while following up with remediation owners and escalating risks.
• Review and maintain cloud security posture management policies to identify misconfigurations and vulnerabilities in cloud resources.
• Partner with Security Engineering to implement automated security scanning for containers and serverless functions.
• Develop and improve KPIs, metrics, and trending data for vulnerability management functions.
• Identify and recommend measures to remediate vulnerabilities and reduce impacts on information resources.
• Assess potential impacts of vulnerabilities and determine appropriate mitigating controls in collaboration with IT professionals.

What we're looking for

• 5+ years of practical experience in the information security field within a large enterprise environment.
• 5+ years of vulnerability management experience working with tools such as Qualys, InsightVM/Rapid7, Wiz, or Nessus.
• Bachelor’s and/or Master’s Degree in Information Security, Engineering, or Computer Science (preferred).
• Advanced knowledge of major Cloud platforms, including common misconfigurations and remediation techniques.
• Experience managing and using Cloud Security Posture Management tools such as Wiz, XPanse, Prisma, Laceworks, or Orca.
• Experience at a financial services/technology company or in a regulated industry.
• Ability to communicate with both technical and non-technical stakeholders at all levels of the organization.