Lead Information Security Engineer – Vulnerability Management

🕒 il y a 1 jour

🏈 Ohio – Distant

🏈 Ohio – Remote

💵 $82 100 - $172 500 / an

⏰ Temps Plein

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🦅 Parrain de Visa H1B

Cette entreprise a parrainé des visas H1B par le passé.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Fifth Third Bank

Site WebLinkedInTous les Emplois

10 000+ employés

Fondée en 1858

🛡️ Assurance

💼 Conseil

📦 Logistique

Insurance • Consulting • Logistics

Fifth Third Bank est une entreprise de services financiers diversifiés offrant une large gamme de produits et services bancaires et financiers. Elle propose des solutions de banque personnelle telles que des comptes chèques et épargne, des cartes de crédit et de débit, ainsi que des services de protection contre le vol d'identité. Les emprunteurs peuvent accéder à divers prêts et options hypothécaires, tandis que les investisseurs bénéficient de produits d'investissement comme des ETF, des fonds communs de placement et des actions. La banque offre également un ensemble complet de services pour les entreprises et les clients commerciaux, y compris la gestion de trésorerie, la gestion de trésorerie d'entreprise et des solutions de prêt spécialisées. De plus, Fifth Third propose des services de gestion de patrimoine avec des services bancaires privés, de fiducie et de succession. Les clients peuvent profiter des plateformes bancaires en ligne et mobiles de Fifth Third, leur permettant de gérer leur banque partout et à tout moment. Fifth Third Bank se concentre sur la fourniture d'expériences bancaires fluides avec un fort accent sur la commodité et la sécurité des clients.

Description

• Serve as the primary escalation point and subject matter expert for complex and high-risk remediation issues across infrastructure, cloud, containers, applications, and code • Provide technical guidance on remediation paths, exploitability assessment, scanning output interpretation, and false-positive evaluations • Own intake, investigation, escalation, and mitigation reviews for critical vulnerabilities, emerging threats, and executive escalations • Drive remediation planning with dependency mapping, coordinated timelines, and long-term fixes • Analyze large datasets to identify trends and shape targeted remediation campaigns • Follow up on stalled remediation plans and escalate when progress does not occur • Communicate risk, urgency, and remediation requirements to technical and non-technical stakeholders • Oversee false-positive determinations, exception requests, and risk-acceptance submissions • Partner with Information Security and application teams across the bank • Report and track vulnerability metrics, KPIs, and KRIs • Create presentations for senior leadership • Design and maintain dashboards and workflows using scripting, Power Automate, Power BI, ServiceNow, Brinqa, and other tools • Optimize Excel workflows using macros, scripting, formulas, and other techniques • Work within an Agile framework • Improve Enterprise Vulnerability Management processes and reduce inefficiencies • Build and maintain standards, playbooks, and repeatable processes • Mentor junior and mid-level engineers • Contribute to program evolution and additional projects

🎯 Exigences

• At least 6 years of related and recent hands-on experience in Vulnerability Management • Advanced understanding of security architecture, networking, operating systems, identity, and cloud services • Experience articulating risk and developing remediation strategies across common technology stacks • Experience triaging and prioritizing complex findings from scanning tools • Ability to translate technical findings into actionable remediation guidance • Strong written and verbal communication skills • Proven analytical and problem-solving skills, including interpreting large datasets and identifying trends • Experience collaborating across multiple teams and influencing outcomes without direct authority • Bachelor’s degree in computer science/information systems or equivalent combination of education and experience • Certifications such as Security+, CISSP, CISM, GIAC, or cloud certifications (AWS preferred) • Experience with cloud security, container security, application security, or code-scanning programs • Experience applying threat-intelligence and exploitability context to remediation prioritization • Working knowledge of Python, PowerShell, or SQL for data analysis and workflow automation • Experience with ServiceNow, Power BI, and Power Automate • Demonstrated experience in system administration, networking, or SOC roles • Experience embedding security controls into CI/CD pipelines and DevSecOps workflows • Hands-on experience with NIST CSF, NIST 800-53, CIS Controls, ISO 27001, and PCI DSS • Position is not available for immigration sponsorship

🏖️ Avantages

• Incentive compensation plan based on company, line of business, and/or individual performance • Comprehensive benefits programs supporting physical, financial, emotional, and social well-being • Benefits for employees and their families • Differentiated compensation offerings • Inclusive culture and equal employment opportunity