Job Title: Information Security Engineer - Vulnerability Management III
At a glance
Mid-level Security Engineering role at Hudson Manpower. Remote, United States · full-time · no salary stated · we estimate $120,988–$189,241 across the United States.
Hudson Manpower has not published a salary for this role. The figure below is our estimate, not theirs.
remoteroles summary, based on the employer's posting.
What you'll do
- Improve the network vulnerability program across the subsidiaries and affiliates it covers
- Bring new applications, projects and processes into the enterprise vulnerability program, from security design through rollout
- Track open infrastructure, application and configuration vulnerabilities and help teams resolve them
- Research threats and fixes, recommend responses to IT teams, and follow through on implementation
- Review security alerts, assess controls and proposed changes, and support incident analysis and reporting
What you bring
- You have a consistent track record in vulnerability management, security engineering or security consulting
- You can present security topics to senior leaders and large audiences, including matters tied to major projects
- You understand security tools and how they connect with architecture and operational processes
- You have led security implementations and can proactively investigate, escalate and research threats
Who this fits
This remote role suits a mid-level security engineer who can advise on projects and work across technical teams. It combines vulnerability program ownership with operational security work, including alert investigation, risk assessment and incident response.
From the employer
Job Title: Information Security Engineer - Vulnerability Management III
Location: Remote
TOP SKILLS:
Must Have
Brinq
Excellent communication and presentation skills, and a proven background of presenting to senior leaders, large groups, etc. on relevant matters pertaining to large projects and impacting key functionality.
Lead and Implementation Experience
Performing referral to principle
proven consistent experience in vulnerability management, security engineering, security consulting etc
Proven experience with proactive threat management, research, escalation, discovery etc.
Security
Solid understanding of popular security tooling and understanding of security architecture/interconnectedness of processes and tooling.
Nice To Have
CISSP, CISA, CISM, AWS Solutions Architect certifications
GRC/audit management experience
Scripting/automation experience – python preferred
Solid proven experience with tooling such as Qualys, Brinqa, Archer, ServiceNOW, Checkmarx, Prisma (and any AWS experience is great as well)
What You’ll Do
Responsible for performing all functions required to support day-to-day data security operations and accountable for security and networking infrastructure component availability and integrity, monitoring compliance with IT security policy, and coordinating investigation and reporting of security incidents.
Primary Responsibilities:
Define, deliver, and support enterprise security tools and architecture in collaboration with other teams.
Enhance the Bank's network vulnerability management program for in-scope subsidiaries and affiliates.
Define security environments and lead the implementation and onboarding of new applications, programs, processes, projects, and initiatives into the Enterprise Vulnerability Management Program.
Communicate, escalate, support, and guide the resolution of open vulnerabilities, including infrastructure, application security, and configuration management vulnerabilities.
Conduct security research on threats and remediation techniques/technology, make recommendations to IS/IT teams, and oversee their implementation.
Proactively monitor and investigate security alerts from managed security service providers and in-house security tools.
Conduct risk assessments to evaluate the effectiveness of existing controls and determine the impact of proposed changes to business processes, applications, and systems.
Support ad hoc requests for reporting and control evidence, as needed.
Perform threat analysis and incident response by interpreting events.
Support the Bank's operational information security responsibilities, including developing and maintaining standards, procedures, and guidelines for the Enterprise Vulnerability Management Program.
Share knowledge and industry best practices with team members.
Serve as a security engineer/consultant on projects.
What You’ll Get
Competitive base salary
Medical, dental, and vision insurance coverage
Optional life and disability insurance provided
401(k) with a company match and optional profit sharing
Paid vacation time
Paid Bench time
Training allowance offering
You’ll be eligible to earn referral bonuses!
Security Engineering work from LinkedIn, X, Reddit and Upwork, in one list.
Each morning you get everything that fits, strongest first.
Security EngineeringRemote
Find me workBy the team behind remoteroles.