Lead, Security Engineer V&CM

🕒 Junho 12

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $156.500 - $181.000 / ano

⏰ Tempo Integral

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

👻 Score fantasma 50%

O que significa: quão provável esta vaga está aberta sem contratação ativa.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

U.S. Financial Technology

SiteLinkedInTodas as Vagas

201 - 500 funcionários

Fundada em 2014

💳 Fintech

☁️ SaaS

🤝 B2B

Fintech • SaaS • B2B

A U. S. Financial Technology é a maior e mais tecnologicamente avançada plataforma de securitização de hipotecas dos EUA, operando a Common Securitization Platform para a Fannie Mae e Freddie Mac. Ela gerencia a emissão e administração de Títulos Lastreados em Hipotecas Residenciais Unifamiliares (SF MBS / UMBS), centraliza dados de nível de empréstimo e de pool em uma plataforma 100% baseada em nuvem e oferece relatórios, análises e serviços operacionais quase em tempo real para apoiar credores, GSEs e investidores. A empresa enfatiza a gestão de dados, riscos e cibersegurança, além de possibilitar liquidez no mercado primário de hipotecas para facilitar aquisições e refinanciamentos de imóveis.

Descrição

• Act as a subject matter expert for all Vulnerability and Configuration Management programs, processes, and tooling • Conduct comprehensive vulnerability assessments using Wiz and Tenable • Identify weaknesses in U.S. FinTech’s IT infrastructure • Communicate findings through reports and meetings to prioritize vulnerability remediation • Track, prioritize, and ensure remediation of vulnerability and compliance issues • Continuously monitor infrastructure for vulnerability and compliance issues • Improve monitors, scans, dashboards, and reporting • Configure, tune, and maintain vulnerability management tools • Collaborate with Security Architecture on new builds, businesses, technologies, and environments • Build security baselines for CIS, DISA STIG, and custom baselines • Correlate vulnerabilities with threat intelligence to assess exploitability and risk • Work with the Cyber Security Operations Center to ensure mitigations are in place • Provide detailed risk assessments for discovered vulnerabilities • Enforce remediation timelines according to standard operating procedures • Collaborate with IT and DevOps teams to ensure timely remediation • Conduct regular and ad-hoc vulnerability scans • Integrate tools with all cloud environments and ensure complete IT-environment coverage • Ensure alignment with internal security policies, regulatory requirements, and industry best practices • Support audits and assessments with evidence and documentation • Liaise between security, IT, development, and risk teams • Provide actionable recommendations to technical and non-technical audiences • Mentor and train junior VCM analysts • Identify gaps in vulnerability or compliance management programs and propose improvements • Develop and maintain SOPs, frameworks, job aids, and how-to materials

🎯 Requisitos

• Bachelor's Degree or equivalent required • BA/BS degree in Computer Science, Information Systems, Cyber Security or a related technical field • Minimum of 7 years of experience with security engineering and operations, managing and supporting large, complex mission-critical systems, vulnerability management tools, patching processes and tools, VM operation/workflow, or configuration/Baseline/File-integrity monitoring applications and processes • Must be authorized to work in the US without requiring employer sponsorship currently or in the future • AWS Cloud experience required • Subject matter expertise in vulnerability and compliance management • Familiarity with current security vulnerabilities, advisories, incidents, penetration techniques, attacks, and countermeasures • Strong understanding of AI Models, technologies, attack paths, vulnerabilities, and securing AI tools or technologies • Experience leveraging AI models to identify, research, or remediate vulnerabilities • Subject matter expertise in network and system vulnerabilities, malware, networking protocols, multi-tiered applications, and attack methods • Experience in a senior technical security role, including network security, operating system security, Internet or Web security, and vulnerability testing • Strong knowledge of TCP/IP, basic packet analysis, network engineering, and LAN/WAN technologies and topologies • Experience conducting comprehensive vulnerability assessments with Wiz and Tenable • General knowledge and experience with Windows/Linux operating systems, baseline security configurations, audit, forensics, and patch management • Experience developing SOPs, job aids, and hands-on training materials • Ability to work in a fast-paced environment with occasional on-call activities • Excellent interpersonal, presentation, verbal, and written communication skills • Ability to manage multiple priorities, projects, deliverables, and stakeholders • Ability to influence peers and management and work cross-functionally • Active in the security industry with external networking relationships • AWS Security or AWS Architect certifications desired

🏖️ Benefícios

• Performance bonus • 401k match • Healthcare coverage • PTO • Broad range of other benefits