Senior Vulnerability Management Engineer

LPL Financial•Charlotte, TX

10d•Hybrid

About The Position

LPL Financial is seeking a Senior Vulnerability Management Engineer to execute and mature its Vulnerability Management program. This role is part of the Cyber Security organization and is crucial for securing systems used by LPL Financial. The engineer will manage Vulnerability Scanning tools and collaborate with various teams, including infrastructure, cloud, engineering, application teams, and third-party vendors, to ensure effective vulnerability management across the environment.

Requirements

5+ years of practical experience in the information security field within a large enterprise environment.
5+ years of vulnerability management experience working with vulnerability management tools (e.g. Qualys, InsightVM/Rapid7, Wiz, Nessus, etc.).
Valid U.S. work authorization that does not require employer sponsorship.

Nice To Haves

Bachelors and/or Master’s Degree in Information Security, Engineering, or Computer Science.
Familiarity with industry-standard security best practices and vulnerability management processes including identification, analysis, reporting, and remediation.
Advanced knowledge of major Cloud platforms, their resources, common cloud misconfigurations/vulnerabilities, and remediation strategies.
In-depth understanding of vulnerability types and techniques/compensating controls for mitigation.
Experience managing and using Cloud Security Posture Management tools such as Wiz, XPanse, Prisma, Laceworks, Orca.
Experience with reviewing, analyzing, managing, and remediating security vulnerabilities and misconfigurations in cloud resources.
Experience in the financial services/technology industry or a regulated industry.
Ability to communicate with both technical and non-technical stakeholders at all levels of the organization.
Strong analytical, interpersonal, and communication skills.

Responsibilities

Act as a vulnerability management SME in areas such as Microsoft platforms, Open Systems platforms, virtualization platforms, Networking, Databases, and Cloud (AWS, Azure, Google).
Lead the definition and implementation of processes, policies, and procedures for vulnerability remediation, tracking open vulnerabilities from identification to resolution, and escalating risks as needed.
Lead and drive large initiatives with enterprise-level visibility to enhance the Vulnerability Management program.
Partner with security and IT professionals to assess the impact of vulnerabilities, determine mitigating controls, and implement them.
Identify and recommend appropriate measures to manage and remediate vulnerabilities to reduce potential impacts on information resources to an acceptable level for senior management.
Build strong partnerships with technical teams to promote best practices for agile vulnerability management and cloud solutions.
Champion vulnerability management and information security by broadening awareness and use of team services, educating on security best practices, and integrating with other business areas.
Assist with the management and maintenance of vulnerability management platforms/tools, including troubleshooting and ensuring successful operations.
Review, implement, and maintain cloud security posture management policies to identify misconfigurations or vulnerabilities in cloud resources.
Partner with Security Engineering to implement and manage Cloud Security Posture Management tools for automated security scanning and analysis of cloud resources.
Understand vulnerability exploitation techniques and stay updated on the latest vulnerabilities and exploits.
Develop and improve KPIs, metrics, and trending for vulnerability management functions.
Participate and lead new projects as needed.