FREE ACCESS
5,000–10,000 jobs/day
See all jobs on JobTailor
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Staff Engineer II, Cyber – Threat and Vulnerability Management
Western Alliance BankCyber Engineer at Western Alliance Bank managing Threat & Vulnerability Management across hybrid environments. Collaborating with teams to reduce enterprise risk and enhance cybersecurity posture.
Tech Stack
Tools & technologiesCloudCyber SecurityLinuxPythonServiceNow
About the role
Key responsibilities & impact- engineer, operationalize, and continuously mature a scalable, risk-based Threat & Vulnerability Management (TVM) program across hybrid environments
- collaborate with internal business partners and IT Tower Leads to proactively address ongoing vulnerability and configuration hardening issues to ensure rapid resolution
- foster a collaborative environment with focus on continuous mitigation and mitigation of cyber vulnerabilities
- accountable to proactively recommend improvements to established processes while continuing to deliver high value in execution
- create and deliver comprehensive project plans as well as remove any impediments, track overall project performance
- serve as a hands-on technical leader responsible for building, integrating, and automating vulnerability discovery, prioritization, remediation workflows, and security guardrails
- partner closely with Cyber Defense, Cloud Engineering, Infrastructure, DevOps, Application, and Platform teams to reduce enterprise risk through measurable, engineering-led outcomes
- assist in the strategic direction and execution of the TVM program
- review and enforce CIS security baseline compliance across enterprise assets
- integrate automated scanning and security controls into DevSecOps pipelines
- work cross-functionally with Cloud Engineering, DevOps, Infrastructure, and IT to prioritize and remediate vulnerabilities based on business risk, exploitability, and regulatory requirements
- support the use and optimization of enterprise vulnerability scanning and compliance tools
- monitor emerging threats, zero-day vulnerabilities, and misconfigurations, and lead remediation and communication efforts accordingly
- produce reporting and metrics that provide visibility into vulnerability trends, patch compliance, and CIS benchmark adherence for technical and executive audiences
- contribute to cloud security governance, including the design and enforcement of security guardrails
- ensure alignment with regulatory standards (e.g., FFIEC, GLBA, PCI-DSS, NIST 800-53, ISO 27001)
- support a team of security analysts and engineers focused on vulnerability detection, analysis, and risk mitigation
Requirements
What you’ll need- 6+ years of related experience in cybersecurity or security engineering experience or similar field
- Bachelor's degree in related field required
- Previous leadership experience preferred
- Advanced knowledge of general Financial Services or Banking is preferred
- Advanced to expert experience with and knowledge of Vulnerability Management Systems, DAST Scanning, SAST, and SCA
- Advanced to expert knowledge of patch management systems
- Advanced knowledge of NIST, MITRE and Administration of an IT Automation platform
- Advanced Linux experience
- Advanced automation skills (Python, PowerShell, Bash)
- Experience in regulated or highly controlled environments
- Hands-on ServiceNow Vulnerability Response experience preferred
- Risk-based vulnerability scoring expertise preferred
- Advanced speaking and writing communication skills
Benefits
Comp & perks- competitive salaries
- an ownership stake in the company
- medical and dental insurance
- time off
- a great 401k matching program
- tuition assistance program
- an employee volunteer program
- a wellness program
ATS Keywords
✓ Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
Threat & Vulnerability ManagementVulnerability Management SystemsDAST ScanningSASTSCApatch management systemsLinuxPythonPowerShellBash
Soft Skills
leadershipcollaborationcommunicationproject managementproblem-solvingstrategic directionrisk mitigationcontinuous improvementtechnical leadershipreporting