Attack surface management

Job Description

Job Description

Must Have Technical/Functional Skills:

• 8 years of experience in information security, technology risk management or related field.
• Demonstrated ability configuring and managing technical security controls at an enterprise level
• with a proven record of partnering with line of business partners and implementing effective risk mitigation strategies.
• Experience with vulnerability and configuration compliance scanning tools such as Symantec, Qualys, Tanium,
• Tenable, etc.
• Familiarity with risk management frameworks and financial industry regulatory requirements.
• Familiarity as a system admin for Unix, Windows, or workstation administration.
• Familiarity with python, bash, powershell and/or regex as well as the ability to develop scripts and run code.

Roles & Responsibilities

• Plan, develop, test and implement configuration compliance policies and technical controls in support of the
• Secure Configuration Program.
• Manage engagement and work with technology teams to validate baseline policy controls and remediate non-compliance.
• Ensure consistently accurate scans and reports are generated. Engage on multiple technology products at one time.

Generic Managerial Skills, If any