Elastic-posted 8 months ago
$110,900 - $175,500/Yr
Full-time • Mid Level
Louisville, CO
Professional, Scientific, and Technical Services

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic's complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. We are looking for a Vulnerability Management Analyst to help drive the growth and maturity of our VM Program, enabling Elastic to achieve the highest compliance and security standards. The InfoSec Product Security team is accountable for the security of all Elastic software and cloud services. We foster customer trust and empower Elastic to weave security into the fabric of our product development and Elastic Cloud platforms. In a globally distributed company, we think differently about achieving critical security and compliance objectives.

  • Responsible for our FedRAMP High procedures, including Continuous Monitoring (ConMon) and audit preparations.
  • Carry out policies and perform VM procedures to support FedRAMP and DoD IL5 compliance requirements in a distributed multi-cloud environment.
  • Collaborate with Product and Governance teams to ensure the effectiveness of the vulnerability management service for multiple compliance frameworks.
  • Operate tooling to ensure scan coverage and hardening of Host VMs, Databases, Containers, Web Applications, APIs, and other cloud services.
  • Engage with Product Development, Site Reliability Engineering, IT, and other collaborators to ensure timely and efficient remediation of vulnerabilities.
  • Help scale and mature our VM service to optimize our approach to meeting new standards and requirements across multiple frameworks in a fast-paced engineering ecosystem.
  • Demonstrated experience operating Vulnerability Management services in a FedRAMP environment (preferably FedRAMP High & DoD Impact Level 5).
  • Participating in compliance audits, evidence gathering, and audit interviews.
  • Proven track record for driving vulnerability management procedures in distributed cloud environments.
  • Experience with vulnerability scanning platforms such as Qualys, Rapid7, Tenable, or similar tools.
  • Experience with cloud platforms (AWS, GCP, Azure).
  • Outstanding spoken and written communication skills in an asynchronous distributed environment.
  • Experience with any Elastic products (Elasticsearch, Kibana, Elastic Agent, Beats, Elastic Cloud, Logstash, Elastic Security).
  • Competitive pay based on the work you do here and not your previous salary.
  • Health coverage for you and your family in many locations.
  • Ability to craft your calendar with flexible locations and schedules for many roles.
  • Generous number of vacation days each year.
  • Increase your impact - We match up to $2000 (or local currency equivalent) for financial donations and service.
  • Up to 40 hours each year to use toward volunteer projects you love.
  • Embracing parenthood with a minimum of 16 weeks of parental leave.
© 2024 Teal Labs, Inc
Privacy PolicyTerms of Service