Principal Vulnerability Management Engineer | Remote, USA

Optiv • Leawood, KS

6d • Remote

About The Position

This position will be fully remote and can be hired anywhere in the continental U.S. The Principal Vulnerability Management Engineer’s primary role is to build, implement, maintain, and support vulnerability management initiatives. The Engineer works with team members and system support personnel with issues related to vulnerability identification, remediation, and policy administration.

Requirements

• 7+ years of administrating vulnerability management systems (Qualys, Rapid7, Tenable, Contrast, Prisma Cloud etc.)
• Exceptional critical thinking and problem solving skills
• Expert knowledge of vulnerability management lifecycle, including remediation
• Ability to analyze device and traffic logs, extensive knowledge of TCP/IP protocol stack

Nice To Haves

• Additional skills in identifying automation and remediation opportunities is desirable; identifying and developing processes to effectively and efficiently replace manual reporting or validation efforts

Responsibilities

• Analyze and addressing security gaps for technologies within client infrastructure
• Identify distributed systems security issues as they arise and coordinate with the technology owners to ensure that issues are addressed and resolved in a timely basis
• Execute technical risk assessment activities for scoped environments
• Perform reporting of findings, issue resolution and management of findings
• Support client infrastructure assessments, audits and external exams
• Provide effective, accurate and timely reporting
• Participate in Information Security remote/table-top assessments
• Identify high/critical risk findings and lead risk findings to resolution
• Identify control deficiencies through gap analyses and identifying underlying root cause
• Designing, implementing, and collaborating on a range of information security metrics and performance reports
• Assisting stakeholders in identifying, initiating, and tracking corrective actions to address anomalies
• Analyze control results in an objective and quantifiable manner
• Produce detailed documentation of assessments and perform threat analysis of gaps identified
• Communicate vendor information security issues to stakeholders, ensuring their understanding of associated risks and actions needed to remediate those risks
• Validate evidence from vendors, before remediation plans are closed

Benefits

• Professional training resources
• Creative problem-solving and the ability to tackle unique, complex projects
• Volunteer Opportunities. “Optiv Chips In” encourages employees to volunteer and engage with their teams and communities.
• The ability and technology necessary to productively work remotely/from home (where applicable)

What This Job Offers

• Job Type: Full-time
• Career Level: Principal
• Education Level: No Education Listed