Security Engineer IV – Exposure Management

The Exposure Management Engineer IV will work at the direction of and with support from the Team Lead and peers to identify, triage, analyze, and mange vulnerabilities across the Firm’s enterprise environment. This will include supporting core aspects of the vulnerability management, configuration management, posture management, penetration testing, security assessments, and vulnerability management and reporting functions. In the role, the Vulnerability Analyst will contribute to the development and maintenance of process documentation within the role and look to suggest opportunities for improvement. The Vulnerability Analyst will have reached proficiency for work and tasks within the assigned role and be able to collaborate and communicate clearly with stakeholders across the Firm.

What You’ll Do:

• Maintain knowledge and understanding of the Edward Jones environment in support of comprehensive exposure identification.

• Utilize a combination of vulnerability/configuration/posture scanning tools, penetration tests, and third-party assessments to identify potential points of exposure across the Edward Jones enterprise environment.

• Perform routine analysis and scanning of exposure findings

What Experience You’ll Need:

• Bachelor’s degree in Information Technology, Telecommunications, Engineering, or related work experience.

• Minimum of 7 years of experience in information security or a related technical area.

• Experienced across on-premises, cloud, and hybrid platforms, infrastructure, systems management, and security technologies.

• Develops system designs supporting vulnerability, configuration, posture management, penetration testing, and security assessments.

• Analyzes system requirements, security risks, feasibility, costs, benefits, and functional requirements.

• Troubleshoots complex security issues and performs root cause analysis using industry-standard tools.

• Applies established cloud security standards, guardrails, and configuration baselines across cloud and hybrid environments.

• Supports KPIs, dashboards, and reporting for risk exposure, remediation, compliance, and security posture.

• Uses automation and tool integrations to improve security visibility, remediation, and reporting.

• Supports vulnerability prioritization, remediation validation, penetration testing, and security assessment activities.

• Collaborates with application, infrastructure, cloud, and risk teams to address security findings.

• Assesses security tools and technologies for functionality, compatibility, scalability, and operational value.

• Documents technical processes, shares knowledge, and contributes to team standards and continuous improvement.

**Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week effective June 1, 2026. Before June 1, 2026, candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office three days per week, with preference for Tuesday through Thursday.**