Attack surface management and security configuration compliance SME

Role: Engineer

Required Skills: Cyber Security

Qualification: BACHELOR OF COMPUTER SCIENCE

Experience: 7 - 12 Years

Function: TECHNOLOGY

Apply By: 2027-01-01

Must Have Technical/Functional Skills

8+ years of experience in information security, technology risk management or related field.

Demonstrated ability configuring and managing technical security controls at an enterprise level

with a proven record of partnering with line of business partners and implementing effective risk mitigation strategies.

Experience with vulnerability and configuration compliance scanning tools such as Symantec, Qualys, Tanium, Tenable, etc.

Familiarity with risk management frameworks and financial industry regulatory requirements.

Familiarity as a system admin for Unix, Windows, or workstation administration.

Familiarity with python, bash, powershell and/or regex as well as the ability to develop scripts and run code.

Roles & Responsibilities

Plan, develop, test and implement configuration compliance policies and technical controls in support of the

Secure Configuration Program.

Manage engagement and work with technology teams to validate baseline policy controls and remediate non-compliance.

Ensure consistently accurate scans and reports are generated. Engage on multiple technology products at one time.

CISSP, CISM or similar industry-recognized certifications are preferred.

Salary: $75,000 - $120,000