Security Engineer, Vulnerability Management

Yum!•United States,

4d•$117,800 - $162,200

About The Position

The Security Engineer III is a role designed for individuals with experience in cybersecurity and IT systems. They support vulnerability management program processes and procedures, using enterprise security tools to facilitate vulnerability identification and reporting. As a Security Engineer, you will frequently interact with members of all our brand's Security and IT teams, as well as third-party platform providers. In this dynamic, global environment, you will be responsible for facilitating vulnerability scanning and penetration testing, communicating vulnerability findings, and tracking vulnerability remediation efforts.

Requirements

Bachelor’s degree in computer science, information security, or a related field
3+ years of experience in vulnerability management or related field
Strong knowledge of vulnerability management tools and methodologies (e.g., Nessus, Qualys, Rapid7).
Excellent analytical and problem-solving skills with the ability to tackle complex technical challenges.
Ability to solve problems in a dynamic team environment and handle multiple assignments in a timely manner.
Strong communication skills and the ability to work collaboratively with cross-functional teams.
Demonstrated initiative in improving processes, mentoring others, and expanding technical capabilities.

Responsibilities

Configure and maintain vulnerability management and penetration testing platforms
Plan, execute, and assess vulnerability scanning and penetration testing services
Manage the output from vulnerability scanning and penetration testing to provide comprehensive reporting details of the vulnerabilities, their potential impact, and suggested remediations as needed
Act as a technical specialist, providing technical support for vulnerability management initiatives and penetration testing engagements
Collaborate across functions to ensure vulnerability management, security programs, and technical controls comply with policies, laws, and regulations.
Drive remediation efforts by partnering with system owners and developers to automate, prioritize and assist in resolving high-risk vulnerabilities
Facilitate penetration testing engagements between external vendors and internal teams to uncover and address security weaknesses
Create and update processes and procedures, along with supporting documentation, for the vulnerability management program
Provide training, guidance, and mentorship to team members on vulnerability management practices and tools
Facilitate vulnerability management reviews and audits with teams
Stay current with emerging threats and vulnerabilities and proactively assess their potential impact on the organization