Vulnerability Mgmt Lead

Lyondell Basell North America•Houston, TX

About The Position

LyondellBasell is a leader in the global chemical industry creating solutions for everyday sustainable living. With a nearly 70-year legacy that includes a Nobel Prize in Chemistry and our proprietary MoReTec recycling technology, LYB is enabling a more sustainable future for generations to come. LYB develops high-quality and innovative products for applications ranging from sustainable transportation and food safety to clean water and quality healthcare. LYB places high priority on diversity, equity and inclusion and is Advancing Good with an emphasis on our planet, the communities where we operate and our future workforce. We're addressing the global challenges of ending plastic waste, taking climate action, and supporting a thriving society, while generating value for our customers, investors, and society.Come Join an Inclusive TeamThis role will design and maintain cybersecurity vulnerability management tools. This will include operational, analytic, and forensic tools, as well as their supporting processes, policies, and controls. You will architect and maintain the tools used uniquely in the organization that support detective, discovery, and investigative Cybersecurity services. You will perform threat analysis, risk assessments, and system configuration analysis among other duties to ensure that architecture adequately validates the organizational security posture, new solutions are secured by design, and legacy systems are adequately protected. The successful candidate will have experience with multiple platforms and programming languages, and a passion to learn the specialized vulnerability assessment tools and processes. This role, reporting to the leader of Secure Architecture and working closely with other members of Cybersecurity, Digital Technology, and others, will directly contribute to the global enterprise architecture and provide appropriate security solutions. Travel: Up to 5%

Requirements

A Bachelor of Science degree in Cybersecurity, Computer Science, or a related technical discipline and typically 6-10 years of progressive experience.
Knowledge of advanced cyber threats, threat intelligence, and adversary methods
Demonstrated experience architecting complex systems related to cybersecurity tools
Excellent written and verbal communication skills with the ability to articulate both technical and abstract concepts in a clear and concise manner
Excellent interpersonal skills and ability to create collaborative relationships

Nice To Haves

Certified Information Systems Security Professional (CISSP), Security+, CCNA Security, or equivalent certification
Working knowledge of the NIST Cybersecurity, MITRE ATT&CK, and ISO frameworks
Experience configuring and using Tenable, layer 7 firewalls, and other validation and continuous control assessment tools
Experience with Splunk, Microsoft MCAS, vulnerability scanning, and source code scanning tools
Experience implementing a vulnerability management program

Responsibilities

Conduct active penetration testing to identify vulnerabilities
Identify and evaluate escalated vulnerabilities and drive the normalization, correlation, and integration of internal and subscription-threat intelligence sources.
Analyze the organization's cyber defense procedures and configurations, and evaluates compliance with regulations and organizational directives
Create and maintain detailed information security roadmaps, architectures, and programs to significantly improve the overall security posture of the organization
Develop, implement, and assess cybersecurity policies, standards, and guidelines to help internal customers design and implement secure solutions
Conduct periodic architectural reviews to assess effectiveness and propose optimal alternatives; audit and review effectiveness of existing controls
Provide technical support and in-depth analysis for escalated security issues and vulnerabilities
Perform technical evaluations, security analysis, and risk assessments
Design and develop security solutions and processes consistent with business goals and risk tolerance
Maintain in-depth knowledge of security trends, threats, and tools
Recognize and appropriately manage confidential and sensitive information

Benefits

Workplace Flexibility: The Company’s Global Remote Work Policy allows eligible employees to request to work remotely up to two full days per standard work week at an approved location other than the designated worksite or office, such as at a home office with managerial approval.
Comprehensive Health, Welfare, Life and Retirement Programs: Our comprehensive programs are aligned with local practices.
6% LYB match on 401(k) contribution
5% LYB cash balance pension plan accrual
Comprehensive Well-being Benefits: Programs to support your physical, mental, financial, and social health, ensuring you receive the care you need, when you need it.
Employee Stock Purchase Plan: The LYB ESPP offers a 10% discount on LYB stock for eligible employees in Germany, Italy, Netherlands, Spain, and US.
Educational Assistance Program: To encourage self-development by providing financial aid for approved educational activities voluntarily undertaken by employees.
Bravo Rewards Program: Recognizing outstanding employee contributions.
Robust Medical and Life Insurance Packages: Offering a variety of coverage options to meet individual needs.
Professional Development: Opportunities to learn and grow through training, mentoring, work experiences, community involvement, and team building activities.
Competitive Vacation Policies: Generous annual leave to support your work-life balance.
Global Adoption Policy: Support for employees expanding their families.
Matching Gifts Program: Enhance the impact of your charitable contributions to qualified organizations.