Senior Associate, Technology Risk and Control - Content Management & Governance

About the position

As a key member of the global Cybersecurity & Technology Controls vulnerability scanning team, you will be responsible for delivering secure vulnerability management solutions that align with functional and user requirements. Your expertise in enterprise-level vulnerability management will be crucial in conducting thorough network vulnerability assessments to identify and address potential security threats.

Responsibilities

• Facilitate the clarification and implementation of security requirements across multiple networks to enable multi-level security solutions that meet organizational needs.
• Collaborate on network architecture and design, focusing on integrating and optimizing vulnerability scanning tools across an enterprise environment.
• Perform deployment, administration, management, configuration, testing, documentation, and integration tasks related to Cloud Network Security Platforms, championing a DevOps security model to ensure security is automated and scalable across all platforms.
• Develop new cloud security implementations, ensuring seamless integration with existing network infrastructure.
• Design and develop strategies for end-to-end automation, including architecture design, performance monitoring, best practices, and proof of concepts.
• Ensure quality control of engineering deliverables, maintaining compliance with strict security standards and firm policies.
• Analyze complex data systems to drive decision-making, ensuring all engineering activities align with firm policies and objectives.
• Collaborate with technologists, stakeholders, and senior business leaders to recommend business process modifications.

Requirements

• Formal training or certification in Security Engineering concepts, with 3+ years of applied experience in the field.
• Proven expertise in planning, designing, and implementing enterprise-level vulnerability management or security solutions.
• Strong proficiency in network architecture and design, with a deep understanding of core networking concepts.
• Experience with public cloud architecture and cloud security, with hands-on experience in deploying and managing cloud-based solutions.
• Expertise in developing and designing on-prem and cloud architectures, ensuring scalability, application resiliency, and robust security implementations.
• In-depth knowledge and experience in vulnerability management and scanning, threat modeling, vulnerability discovery, or penetration testing.
• Ability to independently tackle design and functionality challenges with minimal oversight.

Nice-to-haves

• Certifications in AWS, Networking, or Security.
• Experience with major vulnerability scanning tools (e.g. Rapid7, Tenable Nessus, or Qualys).
• Proficiency in automation tools and practices (e.g. Ansible and/or Terraform).

Benefits

• Comprehensive health care coverage.
• On-site health and wellness centers.
• Retirement savings plan.
• Backup childcare.
• Tuition reimbursement.
• Mental health support.
• Financial coaching.