Senior Security Vulnerability Engineer
Sovrn
·
Posted:
April 12, 2023
·
Hybrid
About the position
As a Senior Security Vulnerability Engineer, the successful candidate will be responsible for conducting vulnerability assessments and managing remediation efforts to protect the company's digital assets. They will work closely with other security professionals and Sovrn team members to identify, prioritize, and mitigate security risks across the organization. The role requires a Bachelor's degree in Computer Science, Information Security, or a related field, and 5+ years of experience in security vulnerability management or a related field. The Senior Security Vulnerability Engineer will report to the Sr Director, Head of Security and work primarily in an office environment but may be required to work remotely on occasion.
Responsibilities
- Conduct vulnerability assessments and drive penetration testing on company systems, applications, and networks.
- Develop and maintain vulnerability management processes to ensure timely identification and resolution of vulnerabilities.
- Work closely with developers and system administrators to ensure timely and effective remediation of identified vulnerabilities.
- Provide security guidance and recommendations to development teams and stakeholders to ensure secure coding practices.
- Develop and maintain security metrics to measure the effectiveness of vulnerability management processes.
- Monitor and analyze security alerts and events to identify potential security incidents.
- Participate in incident response efforts and provide technical guidance during security incidents.
- Stay up-to-date with emerging security threats and vulnerabilities and make recommendations for mitigating them.
- Participate in the development of security policies, standards, and procedures.
- Drive automations to maximize team efficiency.
Requirements
- Conduct vulnerability assessments and drive penetration testing on company systems, applications, and networks.
- Develop and maintain vulnerability management processes to ensure timely identification and resolution of vulnerabilities.
- Work closely with developers and system administrators to ensure timely and effective remediation of identified vulnerabilities.
- Provide security guidance and recommendations to development teams and stakeholders to ensure secure coding practices.
- Develop and maintain security metrics to measure the effectiveness of vulnerability management processes.
- Monitor and analyze security alerts and events to identify potential security incidents.
- Participate in incident response efforts and provide technical guidance during security incidents.
- Stay up-to-date with emerging security threats and vulnerabilities and make recommendations for mitigating them.
- Participate in the development of security policies, standards, and procedures.
- Drive automations to maximize team efficiency.
- Bachelor's degree in Computer Science, Information Security, or a related field.
- 5+ years of experience in security vulnerability management or related field.
- In-depth knowledge of vulnerability assessment tools and methodologies.
- Experience with network and application security testing.
- Familiarity with security standards such as PCI-DSS, HIPAA, or ISO 27001.
- Experience with NIST.
- Experience with incident response and forensic analysis.
- Strong analytical and problem-solving skills.
- Excellent written and verbal communication skills.
- Ability to work independently and as part of a team.
- Relevant certifications such as CISSP, CISM, CEH, or OSCP are a plus.
- Experience working in an agile environment.