Job Requisition ID #

24WD82208

Responsibilities: Develop and oversee the implementation of information security procedures and policies. Build, maintain and upgrade security technology, such as firewalls, for the safe use of computer networks and the transmission and retrieval of information. Design and implement appropriate security controls to identify vulnerabilities and protect digital files and electronic infrastructures. Monitor and respond to computer security breaches, viruses, and intrusions, and perform forensic investigation. Partner with stakeholders and your team to develop capability roadmaps, objectives, metrics and deliver key results to achieve roadmap milestones. Identify and lead new projects and initiatives that make it seamless for developers to onboard and better utilize our security solutions. Leverage data to monitor capability execution to identify opportunities for improvement and to mitigate risk. Partner and collaborate with internal stakeholders on assisting with their overall security posture. Architect efficient solutions for assets in their scanning and reporting in both Cloud and On-Prem environments. Develop automations to assist Product Teams in achieving their trust objectives. Work collaboratively with various teams, including Application Security, Threat Intelligence, Incident Response, Privacy, and Risk, to identify, assess, and mitigate vulnerabilities across our organization. Work with security vendors and onboard products to the Vulnerability Management Program. Work across product and business systems teams to enhance and evangelize security in infrastructure and drive changes needed to respond to emerging threats. Research emerging technologies and maintain awareness of current security risks in support of security enhancement and development efforts. Review outstanding vulnerabilities with product teams and assist in remediation efforts to reduce risk. Handle zero-day events by determining affected assets, prioritizing remediation, producing ad hoc reports, identifying compensating controls, and escalating issues when necessary. Some telecommuting is permitted.

• Utilize knowledge of application security to triage vulnerability reports from customers and security researchers;
• Utilize knowledge of Cyber Incident Response to remediate critical vulnerabilities;
• Utilize knowledge of Penetration Tests to review vulnerability reports;
• Utilize knowledge of vulnerability assessments and application security to review Bug Bounty reports;
• Utilize knowledge of Cyber Risk and Application Security to work with Product Teams in remediating Vulnerabilities;
• Utilize Knowledge of Vulnerability Disclosure for publishing Vulnerabilities to NVD (National Vulnerability Database).

• Utilize knowledge of Cyber Risk to implement business-aligned cyber risk management programs through automation, processes, and systems that help customers focus their investments on key information technology risk;
• Utilize knowledge of Python to build next-generation capabilities that help clients address evolving cyber threats;
• Utilize knowledge of Kali Linux, Python, and MITRE ATT&CK framework for emulating adversarial scenarios;
• Utilize knowledge of Packet Analysis, SIEM and threat Hunting for Advanced Security Operations.