Description

You will lead security operations, governance, and vulnerability risk management for the Corporate Security Team.

This role is hybrid.

Responsibilities

• Drive the Corporate Security Program based on the NIST CSF framework.
• Manage the full Vulnerability Risk Management Program using Qualys for identification, analysis, and remediation coordination.
• Develop and maintain organization-wide security policies, standards, and procedures.
• Monitor network traffic for anomalies, test security controls, and respond to active threats.
• Act as the primary liaison for PCI compliance, audits, and third-party vendor security evaluations.

Required Skills

• 10+ years of experience in Information Security.
• Deep expertise in Splunk, including developing searches, alerts, dashboards, and managing data ingestion via Forwarders and HTTP Event Collectors.
• Hands-on experience managing vulnerability programs using Qualys.
• Proven experience supporting at least one full lifecycle of PCI compliance.
• Experience with Endpoint Detection and Response (EDR) and creating incident response SOPs.
• Experience in incident management, network security, and network penetration testing.
• Proficiency in Python, Perl, and HTML/JS.
• Experience conducting email security assessments and phishing campaigns.
• Bachelor's Degree in Business, Computer Science, or a STEM major.

Preferred Skills

• Experience with Cortex XDR.
• Cloud Security and platform-scale vulnerability management experience.

Key Skills

Education

Bachelor's Degree in Business, Computer Science