Lead Information Security Engineer – Vulnerability Management

🔥 9 minutes ago

🏈 Ohio – Remote

🏈 Ohio – Remote

💵 $82.1k - $172.5k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Fifth Third Bank

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1858

🛡️ Insurance

💼 Consulting

📦 Logistics

Insurance • Consulting • Logistics

Fifth Third Bank is a diversified financial services company offering a wide range of banking and financial products and services. It provides personal banking solutions such as checking and savings accounts, credit and debit cards, and identity theft protection. Borrowers can access various loans and mortgage options, while investors benefit from investment products like ETFs, mutual funds, and stocks. The bank also provides a robust set of services for businesses and commercial clients, including cash management, treasury management, and specialized lending solutions. Additionally, Fifth Third offers wealth management services with private banking, trust, and estate services. Customers can benefit from Fifth Third's online and mobile banking platforms, enabling them to bank anywhere at any time. Fifth Third Bank is focused on delivering seamless banking experiences with a strong emphasis on customer convenience and security.

📋 Description

• Serve as the primary escalation point and subject matter expert for complex and high-risk remediation issues across infrastructure, cloud, containers, applications, and code • Provide technical guidance on remediation paths, exploitability assessment, scanning output interpretation, and false-positive evaluations • Own intake, investigation, escalation, and mitigation reviews for critical vulnerabilities, emerging threats, and executive escalations • Drive remediation planning with dependency mapping, coordinated timelines, and long-term fixes • Analyze large datasets to identify trends and shape targeted remediation campaigns • Follow up on stalled remediation plans and escalate when progress does not occur • Communicate risk, urgency, and remediation requirements to technical and non-technical stakeholders • Oversee false-positive determinations, exception requests, and risk-acceptance submissions • Partner with Information Security and application teams across the bank • Report and track vulnerability metrics, KPIs, and KRIs • Create presentations for senior leadership • Design and maintain dashboards and workflows using scripting, Power Automate, Power BI, ServiceNow, Brinqa, and other tools • Optimize Excel workflows using macros, scripting, formulas, and other techniques • Work within an Agile framework • Improve Enterprise Vulnerability Management processes and reduce inefficiencies • Build and maintain standards, playbooks, and repeatable processes • Mentor junior and mid-level engineers • Contribute to program evolution and additional projects

🎯 Requirements

• At least 6 years of related and recent hands-on experience in Vulnerability Management • Advanced understanding of security architecture, networking, operating systems, identity, and cloud services • Experience articulating risk and developing remediation strategies across common technology stacks • Experience triaging and prioritizing complex findings from scanning tools • Ability to translate technical findings into actionable remediation guidance • Strong written and verbal communication skills • Proven analytical and problem-solving skills, including interpreting large datasets and identifying trends • Experience collaborating across multiple teams and influencing outcomes without direct authority • Bachelor’s degree in computer science/information systems or equivalent combination of education and experience • Certifications such as Security+, CISSP, CISM, GIAC, or cloud certifications (AWS preferred) • Experience with cloud security, container security, application security, or code-scanning programs • Experience applying threat-intelligence and exploitability context to remediation prioritization • Working knowledge of Python, PowerShell, or SQL for data analysis and workflow automation • Experience with ServiceNow, Power BI, and Power Automate • Demonstrated experience in system administration, networking, or SOC roles • Experience embedding security controls into CI/CD pipelines and DevSecOps workflows • Hands-on experience with NIST CSF, NIST 800-53, CIS Controls, ISO 27001, and PCI DSS • Position is not available for immigration sponsorship

🏖️ Benefits

• Incentive compensation plan based on company, line of business, and/or individual performance • Comprehensive benefits programs supporting physical, financial, emotional, and social well-being • Benefits for employees and their families • Differentiated compensation offerings • Inclusive culture and equal employment opportunity