Description

You will drive the Corporate Security Program based on the NIST CSF framework and manage the end-to-end Vulnerability Risk Management Program.

Responsibilities

• Manage the vulnerability lifecycle including identification, analysis, remediation coordination, and reporting using Qualys.
• Develop, implement, and maintain organization-wide security policies, standards, and privacy guidelines.
• Act as the primary liaison for auditors and vendors, serving as the subject matter expert for PCI compliance and reporting.
• Monitor corporate networks for attacks, analyze traffic for anomalies, and design safeguards to protect systems.
• Respond to active threats, facilitate forensic analysis, and lead breach readiness exercises.
• Drive third-party vendor security evaluations and participate in security toll-gates for SSDLC projects.

Required Skills

• Minimum of 8 years of experience in Information Security.
• Proven experience supporting at least one full lifecycle of PCI compliance.
• Expertise in managing vulnerability programs using Qualys.
• Hands-on experience with Splunk, including developing searches, alerts, dashboards, and managing data ingestion via Forwarders and HTTP Event Collectors.
• Experience with Endpoint Detection and Response (EDR) and creating response workflow SOPs.
• Practical experience in Incident Management and system/network security.
• Background in Network Penetration testing and email security, including phishing campaigns.
• Proficiency in Python, Perl, and HTML/JS.
• Strong understanding of computer networks, software development, and internet threat activity.

Preferred Skills

• Experience with Cortex XDR.
• Previous enterprise or platform/cloud vulnerability management and Cloud Security experience.

Key Skills

Education

Any Graduate