Vulnerability / Cloud Security Engineer - Qualys

$145,600 - $170,560/Yr

Eliassen Group - Pittsburgh, PA

Full-time - Senior

Pittsburgh, PA

Administrative and Support Services

About the position

The Vulnerability / Cloud Security Engineer at Qualys is responsible for providing senior-level consultation and professional support for the company's information security infrastructure. This role involves developing and implementing security architecture, standards, and procedures across various platforms, while also addressing high-risk security concerns and incidents. The engineer will work closely with business and operational personnel to recommend and implement new security tools, ensuring compliance with security policies and standards.

Responsibilities

• Consults on a senior level and provides professional support for major components of the company's information security infrastructure.
• Contributes to the development and implementation of security architecture, standards, procedures, and guidelines for multiple platforms in diverse system environments.
• Consults with the business and operational infrastructure personnel regarding new and existing technologies.
• Recommends new security tools to management and provides guidance and expertise in their implementation.
• Reviews and analyzes highly complex data and information to provide insights, conclusions, and actionable recommendations.
• Defines, implements, and applies area-wide security and/or COB policies and standards by leveraging in-depth knowledge of globally accepted information security and/or COB principles.
• Addresses high-risk security concerns or incidents.
• Recommends course of action to mitigate risk and ensures that appropriate standards are established and published.
• Contributes to the achievement of area objectives.

Requirements

• 10-12 years of experience in information security or related technology experience.
• Proficiency in Qualys, including managing scans and using the tool.
• 6-8+ years of experience in Container (Docker) / Vulnerability Management Security.
• Understanding of cloud vulnerability compliance, architecture, and design with an emphasis on vulnerability management, discovery, remediation, and general security operations practices focusing on cloud IaaS / PaaS / SaaS and their native security platforms on cloud providers such as AWS, Google Cloud Platform, and Microsoft Azure (including Sentinel).
• Strong knowledge of large-scale cloud environments, enterprise cloud environments, and cloud policy as code.

Nice-to-haves

• Experience in designing and developing automation tools and infrastructure to run service-oriented stacks on internal data centers.

Benefits

• Medical, Dental, and Vision benefits
• 401k with company matching
• Life insurance
• Sick time if required by law in the worked-in state/locality