Engineer III, Vulnerability Management

🕒 vor 6 Tagen

🤠 Texas – Remote

🤠 Texas – Remote

⏰ Vollzeit

🟠 Senior

🔴 Experte

👷🏻‍♀️ Ingenieur

👻 Geisterscore 10%

Was es bedeutet: wie wahrscheinlich diese Stelle offen bleibt, ohne dass aktiv eingestellt wird.So liest du es: 60 % oder höher heißt, wir halten das für einen Geisterjob. Niedrigere Werte sind weniger bedenklich.Wie wir werten: Dauer offen, Neuveröffentlichungen, offene Stellen vs Teamgröße, wie schnell Stellen geschlossen werden, und ob ein Gehalt angegeben ist.Hinweis: eine Schätzung aus öffentlichen Daten, kein Urteil über das Unternehmen. Echte Stellen können hoch punkten, nutze es also als Hinweis, nicht als Fakt.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

Cencora

WebsiteLinkedInAlle Stellen

10.000+ Mitarbeiter

💼 Beratung

📦 Logistik

🏥 Gesundheitswesen

Consulting • Logistics • Healthcare

Cencora ist ein Unternehmen, das sich der Verbesserung der Gesundheit und des Wohlbefindens von Menschen und Tieren weltweit widmet. Aufbauend auf dem Erbe von AmerisourceBergen bietet Cencora eine breite Palette branchenführender Lösungen an, die Speziallogistik, Lagerhaltung, Arzneimittelforschung, Unterstützung bei der klinischen Entwicklung und mehr umfassen. Sie bieten Unterstützung bei der Kommerzialisierung und dem Zugang von Patienten und bieten Großhandels- und Spezialvertriebsdienste an. Cencora bedient eine vielfältige Kundschaft, darunter Pharmaunternehmen, Arztpraxen, Apotheken und Gesundheitssysteme. Das Unternehmen erweitert seine Dienstleistungen auch auf die Tiergesundheit, übernimmt Betriebsführung und liefert Produkte für die tierärztliche Arzneimittelversorgung. Mit einer starken globalen Präsenz zielt Cencora darauf ab, die Gesundheitsversorgung durch innovative Produkte und Lösungen umzugestalten und strebt danach, gesündere Zukunftsperspektiven für alle zu schaffen.

Beschreibung

• Perform advanced vulnerability analysis across infrastructure, cloud, endpoint, network, application, SaaS, and externally facing assets • Lead and support Continuous Threat Exposure Management (CTEM) processes, including scoping, discovery, prioritization, validation, mobilization, and ongoing risk reduction • Operate and improve vulnerability management, attack surface management, external posture management, cloud posture, and SaaS posture capabilities • Analyze and normalize vulnerability and posture data and develop risk-based remediation priorities • Assess vulnerabilities using business context, asset criticality, exploitability, threat intelligence, exposure, compensating controls, and regulatory or compliance impact • Drive remediation and risk treatment with infrastructure, cloud, network, application, endpoint, DevOps, and business technology teams • Lead emerging vulnerability and critical exposure response, including impact analysis, stakeholder coordination, mitigation tracking, and executive-level reporting • Create and maintain dashboards, metrics, and reporting for vulnerability trends, remediation progress, SLA performance, exposure reduction, attack surface changes, and program maturity • Support unified vulnerability management workflows, including ticketing, ownership assignment, exception handling, rescan validation, remediation automation, and governance • Evaluate and recommend improvements to scanning coverage, asset inventory quality, vulnerability data integrity, risk scoring, and stakeholder reporting • Translate technical findings into remediation guidance and concise risk summaries for leadership • Contribute to security standards, procedures, playbooks, documentation, and continuous improvement initiatives • Mentor junior engineers and analysts on vulnerability triage and remediation governance

🎯 Anforderungen

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Information Technology, Engineering, or a related field, or equivalent practical experience • 7–10 years of combined experience in information technology, cybersecurity, systems administration, cloud operations, network security, application security, security engineering, or related disciplines • At least 4 years of hands-on experience in vulnerability management, exposure management, attack surface management, configuration assurance, or a closely related cybersecurity function • At least one active cybersecurity certification, such as CISSP, CISM, Security+, CySA+, GSEC, CCSK, CCSP, OSCP, GIAC certification, or another recognized security certification • Strong understanding of vulnerability lifecycle management, including discovery, validation, prioritization, remediation, exception handling, rescan validation, and reporting • Experience with vulnerability assessment or vulnerability management platforms such as Qualys, Tenable, Rapid7 InsightVM, Microsoft Defender Vulnerability Management, Wiz, Armis, or comparable tools • Experience with attack surface, posture, or exposure management capabilities such as CAASM, EASM, RBVM, CSPM, SSPM, external posture management, or security ratings platforms • Ability to interpret CVEs, CVSS, EPSS, threat intelligence, exploitability indicators, asset context, and compensating controls to prioritize risk • Experience with enterprise asset data, CMDB data, ownership models, assignment groups, and business criticality attributes • Experience using Excel, Power BI, SQL, data lakes, reporting platforms, or other data analysis and visualization tools • Working knowledge of NIST CSF, NIST 800-53, ISO 27001, CIS Critical Security Controls, PCI DSS, HIPAA, GDPR, OWASP Top 10, SANS Top 25, and MITRE ATT&CK • Excellent written and verbal communication skills • Demonstrated ability to coordinate cross-functional remediation activities in a complex enterprise environment • Preferred: experience building or maturing CTEM, exposure management, or unified risk-based vulnerability management programs • Preferred: experience with vulnerability workflow automation, ServiceNow SecOps, Jira, SOAR, or similar platforms • Preferred: experience consolidating and normalizing vulnerability data across multiple source tools • Preferred: cloud security and cloud posture management across AWS, Azure, Google Cloud, or hybrid environments • Preferred: external attack surface management, SaaS security posture management, configuration assurance, or third-party exposure management • Preferred: regulatory, audit, customer assurance, or compliance reporting experience • Preferred: scripting or automation using Python, PowerShell, APIs, or query languages • Ability to influence without direct authority and lead cross-functional initiatives

🏖️ Vorteile

• Medical, dental, and vision care • Backup dependent care • Adoption assistance • Infertility coverage • Family building support • Behavioral health solutions • Paid parental leave • Paid caregiver leave • Training programs • Professional development resources • Mentorship programs • Employee resource groups • Volunteer activities