Description

Key Qualifications:

• Requires 5+ years of experience in vulnerability management
• Excellent knowledge about common security vulnerabilities
• Experience in network, systems, web, and infrastructure security
• Very good understanding of 3rd party cloud and container security, components, and strategies
• Experience with creating custom dashboards for reporting security posture to engineering/leadership
• Experience with Python, Go and/or bash scripting
• Experience with SQL, OSQuery and Splunk
• Ability to track and manage multiple parallel vulnerability management activities
• Good communication skills and high standard of ethics

Responsibilities

• Ability to validate, judge severity and business impact of security vulnerabilities
• Responsible for maintaining and improving the security posture by identifying, scoping and prioritizing remediation of vulnerabilities across ASE
• Provide technical guidance for resolution of reported vulnerabilities on cloud environments
• Prepare summary reports that are compiled from newly discovered and existing vulnerabilities
• Collaborate with cross functional teams to strategize and prioritize remediation work

Monitor and track remediation work

• Identify and improve automation efforts to the current process
• Participate in response efforts related to vulnerability management
• Provide timely updates to relevant stakeholders
• Create reports for tracking progress updates

Additional Requirement:

• Resource specifically needs knowledge on cloud infrastructure security and standards (AWS, GCP, etc.)

This role is essentially for a Cloud Security / Vulnerability Management Engineer with strong exposure to:

• Cloud Platforms: Amazon Web Services, Google Cloud
• Security Tools: Splunk, osquery
• Programming/Scripting: Python, Go, Bash
• Core Skill: Vulnerability assessment, remediation tracking, cloud security posture management

Key Skills

Education

Bachelor's degree