Moneycorp

Engineer

• Lead Threat & Vulnerability Management across Azure and IaaS: scanning, coverage, risk scoring and SLA-driven remediation
• Provide regulatory-grade reporting for resilience and audits
• Continuously evaluate and improve vulnerability detection capabilities using tools such as Qualys, Tenable, Rapid7, or similar
• Own scanning coverage for Windows, Linux, containers, images and services
• Define SLAs by severity; track remediation and escalate breaches
• Integrate TVM with SIEM/Defender; publish dashboards and coordinate pen-tests
• Provide evidence for PCI/SWIFT/FFIEC; maintain zero-day response playbooks
• Lead the design and implementation of vulnerability scanning, assessment, and reporting processes across cloud and on-prem environments
• Analyze scan results, prioritize findings based on risk, and coordinate remediation efforts with relevant teams
• Define and evolve the vulnerability management program, aligning with industry standards and regulatory requirements
• Serve as a subject matter expert on vulnerability risk, threat exposure, and mitigation strategies
• Provide technical leadership and mentorship to junior security engineers
• Partner with infrastructure, application, and DevOps teams to ensure vulnerabilities are addressed effectively and efficiently
• Communicate risk and remediation plans to technical and non-technical stakeholders, including executive leadership
• Collaborate with compliance and audit teams to support regulatory reporting and evidence collection
• Integrate threat intelligence feeds to contextualize vulnerabilities and prioritize based on exploitability
• Develop automation scripts and workflows to streamline scanning, reporting, and remediation tracking

Senior Vulnerability Engineer