Infrastructure Security Vulnerability Engineer

🕒 Outubro 21

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $127.100 - $133.400 / ano

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 6%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Avaya

SiteLinkedInTodas as Vagas

5001 - 10000 funcionários

💼 Consultoria

📣 Marketing

📦 Logística

💰 Post-IPO Debt em 2022-06

Consulting • Marketing • Logistics

A Avaya é uma provedora líder de soluções de experiência do cliente e comunicação, capacitando empresas a inovar sem interrupções. A empresa oferece um conjunto abrangente de tecnologias impulsionadas por IA, projetadas para aprimorar as jornadas do cliente, otimizar o engajamento dos funcionários e impulsionar o crescimento dos negócios, garantindo interações consistentes e de alta qualidade em todos os canais. As plataformas da Avaya, como a Avaya Experience Platform e Communication & Collaboration Suite, facilitam a comunicação intercanal perfeita e fluxos de trabalho colaborativos para organizações em diversos setores.

Descrição

• Lead and coordinate vulnerability remediation across infrastructure and applications • Evaluate vulnerabilities using CVE/CVSS data, exploitability, threat intelligence, asset criticality, attack paths, and exposure information • Align remediation activities with CISA BOD 26-04 and other federal cybersecurity directives • Support vulnerability assessment and remediation across Windows Server, Linux/RHEL, and application environments • Use Tenable Security Center, Nessus, and Qualys to review findings and validate remediation • Partner with application owners, infrastructure teams, vendor managers, and risk partners to drive issues to closure • Maintain vulnerability records and remediation status in ServiceNow or other systems of record • Coordinate patching and remediation through established change management processes • Support exception management, risk-based remediation, incident-driven response, and escalation of overdue vulnerabilities • Use cloud-based AI tools to support vulnerability identification, analysis, prioritization, and remediation workflows • Develop vulnerability management metrics and reports covering remediation progress, aging, overdue findings, and risk trends • Improve vulnerability management procedures, remediation workflows, reporting accuracy, and operational efficiency • Document findings, remediation activities, exceptions, and supporting processes

🎯 Requisitos

• US citizenship required • Must be currently authorized to work in the United States without visa sponsorship now or in the future • 5–6 years of experience and a Bachelor degree or equivalent, or 4 years of experience and a Master degree or equivalent • 3–5+ years of experience in vulnerability management, vulnerability remediation, patch management, or closely related infrastructure security • Hands-on experience with Tenable Security Center, Nessus, and Qualys • Working knowledge of Windows Server 2019 and later • Experience supporting Linux environments, particularly RHEL 9.x and later • Understanding of CVE and CVSS analysis, exploitability, threat intelligence, asset criticality, and exposure-based remediation • Experience coordinating vulnerability remediation and patch management through closure • Familiarity with change management processes • Experience using ServiceNow ticketing or similar systems • Strong Microsoft Excel and reporting skills • Strong written and verbal communication, analytical, organizational, and troubleshooting skills • Ability to work within a regulated cloud environment and follow security, compliance, documentation, and risk management processes • Preferred familiarity with FedRAMP, NIST SP 800-53, DISA STIGs, CISA KEV information, federal or DoD environments, PowerShell, Bash, Python, ManageEngine Endpoint Central, VMware, Active Directory, application security, cloud security, and AI-assisted tools • Relevant cybersecurity, vulnerability management, infrastructure security, or cloud security certifications are desirable, including Security+, CySA+, or CISSP

🏖️ Benefícios

• Benefits offered (not otherwise specified) • Meaningful cybersecurity impact supporting critical federal government operations • Technical problem-solving across infrastructure, applications, security tools, and remediation processes • Cross-functional collaboration with application owners, infrastructure engineers, vendors, and risk stakeholders • Continuous improvement through automation, analytics, and AI-assisted capabilities

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo