Vulnerability / Cloud Security Engineer

$145,600 - $170,560/Yr

Eliassen Group - Pittsburgh, PA

Full-time - Senior

Pittsburgh, PA

Administrative and Support Services

About the position

The Vulnerability / Cloud Security Engineer role at Qualys involves providing senior-level consultation and professional support for the company's information security infrastructure. The position focuses on developing and implementing security architecture, standards, and procedures across various platforms, while also addressing high-risk security concerns and incidents. The engineer will work closely with business and operational personnel to recommend and implement new security tools and practices, ensuring compliance with security policies and standards.

Responsibilities

• Consults on a senior level and provides professional support for major components of the company's information security infrastructure.
• Contributes to the development and implementation of security architecture, standards, procedures, and guidelines for multiple platforms in diverse system environments.
• Consults with the business and operational infrastructure personnel regarding new and existing technologies.
• Recommends new security tools to management and provides guidance and expertise in their implementation.
• Reviews and analyzes highly complex data and information to provide insights, conclusions, and actionable recommendations.
• Defines, implements, and applies area-wide security and/or COB policies and standards by leveraging in-depth knowledge of globally accepted information security and/or COB principles.
• Addresses high-risk security concerns or incidents.
• Recommends course of action to mitigate risk and ensures that appropriate standards are established and published.
• Contributes to the achievement of area objectives.

Requirements

• 10-12 years of experience in information security or related technology experience.
• Proficiency in Qualys, including managing scans and using the tool effectively (6-8+ years).
• Understanding of cloud vulnerability compliance, architecture, and design with a focus on vulnerability management, discovery, remediation, and general security operations practices in cloud environments (IaaS, PaaS, SaaS).
• Strong knowledge of large-scale cloud environments (public or private) and enterprise cloud environments, including cloud policy and policy as code.

Nice-to-haves

• Experience in designing and developing automation tools and infrastructure to run service-oriented stacks on internal data centers.

Benefits

• Medical, Dental, and Vision benefits
• 401k with company matching
• Life insurance