Analyze, validate, demonstrate, and adjust severity of vulnerabilities based on actual risk to the organization.
Document guidance to provide clarity about our vulnerability reporting and remediation processes.
Refine the secure coding and secure cloud configuration guidance and standards provided to engineers.
Develop innovative strategies to drive engineering to prioritize fixing issues, from most important to least, while reinforcing best practices in infrastructure, container dependency upgrades and 3rd-party library patching.
Evaluate, select, and manage effective tools for detecting and managing security vulnerabilities.
Take a "hands-on" approach to build automated integrations with security tools, as well as solutions to inventory, monitor, and report on vulnerability process maturity to leadership and other stakeholders.
Assist in shifting the culture toward "security by design" by performing root cause analysis (RCA) on the vulnerabilities and recommending improvements in process and habits to prevent issues from recurring.
Demonstrate satisfaction of internal policy and compliance requirements for SLAs by tracking metrics such as MTTR, vulnerability escape rate, and other SDLC and/or CI/CD pipeline measurements.

Requirements

5 years relevant experience with Bachelors in related field; or High School Diploma or equivalent and 9 years relevant experience.
Experience with multiple scanners - Nessus Tenable, SCAP.
Experience maintaining a scanning environment.
Candidate must have an active TS/SCI clearance.

Benefits

Health insurance
401(k) matching
Paid time off
Tuition reimbursement
Early childhood and post-secondary education scholarships

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

vulnerability analysissecure codingcloud configurationroot cause analysisautomated integrationssecurity tools integrationvulnerability managementmetrics trackingSDLCCI/CD

Soft Skills

communicationproblem-solvingcollaborationleadershipprocess improvementstrategic thinkingadaptabilityanalytical thinkingattention to detailculture change advocacy

Certifications

TS/SCI clearance