Applications Security, Backlog Prioritization, Communication Skills, Computer Science, Computer Security, Establish Priorities, Incident Response, Machine Tool, Metrics, Product Engineering, Risk, Risk Analysis, Risk Management, Root Cause Analysis, Service Level Agreement (SLA)
Pay Rate Range: $80 - $92.69/hr. on W2
Note: Open to remote in San Jose, CA or McLean, VA
Duties:
- The ideal candidate should have over 4 years of experience in vulnerability management.
- He or she will use their expertise to make consistent risk-based decisions when partnering directly with engineering product teams to manage their vulnerability backlog and risk hygiene.
Specifically, they will:
- Act as the technical security point-of-contact when partnering directly with engineering product teams
- Strategically prioritize the risk reduction of vulnerabilities
- Drive vulnerabilities to remediation within SLA
- Act as the lead security contact during incidents
- Own metrics and escalations, such as Time-To-Remediation and SLA adherence, to ensure visibility of engineering product team's risk posture
- Identify and implement strategic improvements and paved road solutions to improve resiliance and
Skills:
- Vulnerability Management / Triage
- Vulnerability Risk Assessment
- Vulnerability Incident Response
- Knowledge of application security vulnerabilities (OWASP Top 10) and mitigation techniques
- Knowledge of infrastructure vulnerabilities, mitigation techniques, and tooling (e.g. Spotlight Crowdstrike, Rapid7 Nexpose)
- Dependability: Meets commitments, works independently, accepts accountability, handles change, sets personal standards, stays focused under pressure
- Strong understanding of common security concepts that support root-cause analysis to make data-driven decisions on vulnerability patterns and trends
- Ability to speak and communicate professionally
Education:
- Bachelor's degree in computer science, engineering, or a related subject area