Sr. Security Engineer

Vulnerability Management Support

This job is to support the Vulnerability Management program. Perform research and analysis of scheduled and on demand vulnerability assessments and post results. Conduct POC and implement IoT and OT security solutions to client unmanaged IoT/OT assets. Work with asset owner to safeguard assets and patch any unresolved vulnerabilities. Ensure all assets and network segments are scanned periodically and results are shared with infrastructure team. Research exploit techniques and mitigation strategies. Perform analysis of asset and vulnerability information to identify risks that were not discovered via automated scanning. Troubleshoot issues that may occur during automated network scanning, and or agent scans. Review public and private vulnerability notifications/disclosures, consume research findings and prioritize remediation efforts. Create visibility and awareness for upper management on vulnerabilities that require attention. Develop vulnerability reports and scorecards that define the current state of the corporate network security risk posture. Integrate vulnerability management tools with other systems, such as CMDB, SIEM, and Archer. Assist with implementing policy compliance tools to monitor compliance against CIS and other industry related benchmarks. Implement Web Application Scanning solution. Provide vulnerability reports to application team, and be a subject matter expert on remediation. Develop rules to identify non-compliant resources in our cloud environments and create automations to remediate the non-compliant resources.