Capital One

Vulnerability Remediation Manager, Security Testing Service

Capital One

full-time

Posted on:

Location Type: Office

Location: McLeanNew YorkTexasUnited States

Visit company website

Explore more

AI Apply
Apply

Salary

💰 $147,100 - $201,400 per year

About the role

  • Serve as an Cyber Security Remediation subject matter expert
  • Collaborate with a team of Information Security professionals to provide subject matter expertise to business project & engineering teams
  • Evaluate the status of Cyber control programs through analysis of information security metrics
  • Articulate operations, compliance, and cybersecurity objectives for business leadership to inform prioritized risk reduction
  • Effectively communicate the impact of operations, compliance, and cybersecurity gaps to multiple audiences, encouraging remediation activities to enhance their cybersecurity posture
  • Lead activities in response to large-scale enterprise remediation efforts

Requirements

  • High School Diploma, GED, or equivalent certification
  • At least 4 years of experience with vulnerability identification and management
  • At least 4 years of experience with IT operations
  • At least 4 years of experience with technology or cyber security risk management frameworks
  • CISSP, CEH, AWS Cloud Practitioner or AWS Certified Solutions Architect Associate certification (preferred)
  • Experience with monitoring, gathering, and assessing artifacts as part of continuous security monitoring (C&A, PO&AM, NIST 800-37)
  • Experience in operational compliance or IT audit
  • Experience as a Systems Administrator or Network Administrator
  • Experience with Static and Dynamic Application Security Testing, scanning tools and processes
  • Experience utilizing Agile methodologies
Benefits
  • Health insurance
  • 401(k) matching
  • Performance based incentive compensation
  • Comprehensive competitive benefits
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools
vulnerability identificationvulnerability managementIT operationscyber security risk management frameworksStatic Application Security TestingDynamic Application Security Testingscanning toolsAgile methodologiescontinuous security monitoringoperational compliance
Soft Skills
communicationcollaborationleadershipanalysisarticulationrisk reductionencouragementexpertise
Certifications
CISSPCEH