Associate Web Application Security Specialist, Attack Surface Management

Associate Web Application Security Specialist, Attack Surface Management

At VF, we strive to foster a culture of belonging based on respect, connection, openness, and authenticity. So, before we get to the job details, take a minute to learn a little more about us – our values and our culture - visit VF Careers or

What will you do?

A day in the life of an Associate Web Application Security Specialist, Attack Surface Management at VF looks a little like this.

As a member of the Application Security team, you will be a key member of the team looking across the VF Global enterprise looking for threats and vulnerabilities that would potentially or unnecessarily place the company at risk.

Working with the different teams within VF you will oversee the discovery of VF's external assets and evaluate their security posture. You will work with both technology and business teams to reduce external risk exposure.

Let's break down that day-in-the-life a bit more.

• Oversee the Attack Surface Management program from the technical perspective
• Regularly identify and catalog all assets, including new and existing ones, to maintain an up-to-date inventory of VF's attack surface
• Coordinate with various stakeholders to ensure a comprehensive understanding of the attack surface and facilitate effective risk reduction
• Serve as a subject matter expert for application development and infrastructure teams
• Analyze organization's cyber defense policies/configurations and evaluate weaknesses and vulnerabilities
• Participate in the creation of effective and efficient processes to drive successful reduction of risk within VF
• Research and advocate for new security solutions and technologies
• Ensuring the highest levels of security practices are maintained by VF through projects, implementations
• Establish communications with associates related to threats, vulnerabilities, processes and security risks across a Global landscape
• Escalate as necessary high or critical risks, threats or vulnerabilities to the proper channels for resolution
• Advocate and evangelize the importance of Application Security within VF and socialize through internal channels

What do you need to succeed?

We all have unique skills that we bring to work and celebrate every day. For this role, there are foundation skills you'll need to succeed and excel. Additionally, while formal education in a related field is great to have, we are most interested in your years of experience and professional achievements.

The foundation skills you will need in this position are:

• 1-3 Years of related experience
• Project management skills
• Excellent communication skills and problem-solving ability
• Demonstrated ability to work independently and with others
• Ability to manage the details and compliance with standards and expectations
• Demonstrate technical writing skills
• Follows all defined IT standards and processes (i.e. IT Governance, SM&G, Architecture, etc.), and provides input for improvements to the appropriate process owners as needed
• Maintains a proper balance between business and operational risk
• Follow the defined project management standards and processes
• Knowledge of operating systems, ports, and services
• Knowledge of the OWASP top 10
• Travel by air and overnight, as required 10% amount of time.