Lead, Security Engineer V&CM

🕒 vor 4 Monaten

🇺🇸 Vereinigte Staaten – Remote

💵 $156.500 - $181.000 / Jahr

⏰ Vollzeit

🟠 Senior

👮‍♂️ IT-Sicherheitsingenieur

👻 Geisterscore 53%

Was es bedeutet: wie wahrscheinlich diese Stelle offen bleibt, ohne dass aktiv eingestellt wird.So liest du es: 60 % oder höher heißt, wir halten das für einen Geisterjob. Niedrigere Werte sind weniger bedenklich.Wie wir werten: Dauer offen, Neuveröffentlichungen, offene Stellen vs Teamgröße, wie schnell Stellen geschlossen werden, und ob ein Gehalt angegeben ist.Hinweis: eine Schätzung aus öffentlichen Daten, kein Urteil über das Unternehmen. Echte Stellen können hoch punkten, nutze es also als Hinweis, nicht als Fakt.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

U.S. Financial Technology

WebsiteLinkedInAlle Stellen

201 - 500 Mitarbeiter

Gegründet 2014

💳 Fintech

☁️ SaaS

🤝 B2B

Fintech • SaaS • B2B

U. S. Financial Technology ist die größte und technologisch fortschrittlichste Plattform für die Verbriefung von Hypotheken in den USA und betreibt die Common Securitization Platform für Fannie Mae und Freddie Mac. Sie verwaltet die Ausgabe und Administration von Single-Family Mortgage-Backed Securities (SF MBS / UMBS), speichert zentral Darlehens- und Pool-Daten auf einer 100% cloudbasierten Plattform und bietet nahezu in Echtzeit Berichterstattung, Analysen und operative Dienstleistungen zur Unterstützung von Kreditgebern, GSEs und Investoren. Das Unternehmen legt Wert auf Datenmanagement, Risiko- und Cybersicherheit sowie die Ermöglichung von Liquidität auf dem Primärhypothekenmarkt, um den Kauf und die Refinanzierung von Immobilien zu erleichtern.

Beschreibung

• Act as a subject matter expert for all Vulnerability and Configuration Management programs, processes, and tooling • Conduct comprehensive vulnerability assessments using Wiz and Tenable • Identify weaknesses in U.S. FinTech’s IT infrastructure • Communicate findings through reports and meetings to prioritize vulnerability remediation • Track, prioritize, and ensure remediation of vulnerability and compliance issues • Continuously monitor infrastructure for vulnerability and compliance issues • Improve monitors, scans, dashboards, and reporting • Configure, tune, and maintain vulnerability management tools • Collaborate with Security Architecture on new builds, businesses, technologies, and environments • Build security baselines for CIS, DISA STIG, and custom baselines • Correlate vulnerabilities with threat intelligence to assess exploitability and risk • Work with the Cyber Security Operations Center to ensure mitigations are in place • Provide detailed risk assessments for discovered vulnerabilities • Enforce remediation timelines according to standard operating procedures • Collaborate with IT and DevOps teams to ensure timely remediation • Conduct regular and ad-hoc vulnerability scans • Integrate tools with all cloud environments and ensure complete IT-environment coverage • Ensure alignment with internal security policies, regulatory requirements, and industry best practices • Support audits and assessments with evidence and documentation • Liaise between security, IT, development, and risk teams • Provide actionable recommendations to technical and non-technical audiences • Mentor and train junior VCM analysts • Identify gaps in vulnerability or compliance management programs and propose improvements • Develop and maintain SOPs, frameworks, job aids, and how-to materials

🎯 Anforderungen

• Bachelor's Degree or equivalent required • BA/BS degree in Computer Science, Information Systems, Cyber Security or a related technical field • Minimum of 7 years of experience with security engineering and operations, managing and supporting large, complex mission-critical systems, vulnerability management tools, patching processes and tools, VM operation/workflow, or configuration/Baseline/File-integrity monitoring applications and processes • Must be authorized to work in the US without requiring employer sponsorship currently or in the future • AWS Cloud experience required • Subject matter expertise in vulnerability and compliance management • Familiarity with current security vulnerabilities, advisories, incidents, penetration techniques, attacks, and countermeasures • Strong understanding of AI Models, technologies, attack paths, vulnerabilities, and securing AI tools or technologies • Experience leveraging AI models to identify, research, or remediate vulnerabilities • Subject matter expertise in network and system vulnerabilities, malware, networking protocols, multi-tiered applications, and attack methods • Experience in a senior technical security role, including network security, operating system security, Internet or Web security, and vulnerability testing • Strong knowledge of TCP/IP, basic packet analysis, network engineering, and LAN/WAN technologies and topologies • Experience conducting comprehensive vulnerability assessments with Wiz and Tenable • General knowledge and experience with Windows/Linux operating systems, baseline security configurations, audit, forensics, and patch management • Experience developing SOPs, job aids, and hands-on training materials • Ability to work in a fast-paced environment with occasional on-call activities • Excellent interpersonal, presentation, verbal, and written communication skills • Ability to manage multiple priorities, projects, deliverables, and stakeholders • Ability to influence peers and management and work cross-functionally • Active in the security industry with external networking relationships • AWS Security or AWS Architect certifications desired

🏖️ Vorteile

• Performance bonus • 401k match • Healthcare coverage • PTO • Broad range of other benefits