Description
The Candidate will perform vulnerability response and security key rotation services. They will review a backlog of open security vulnerabilities, analyze their current status, and facilitate cross-functional remediation. They will be required to enrich vulnerability and response descriptions and document lessons learned and best practices. Regularly, they will be responsible for providing reporting around metrics such as mean time to remediate (MTTR) categorized by vulnerability type and/or security control. In addition, the Candidate will support various security operations activities such as rotating security keys according to predefined playbooks.
Tools

1. All proprietary tooling
   1. Bug tracking tool
   2. Key management tools

Qualifications Required

1. (> 5 yrs) Technical program management experience - independent contributor with proven ability to work cross-functionally to identify/remediate security issues
2. (> 3 yrs) - Security Operations activities such as configuring and/or improving security controls (e.g. key management)
3. Contribute to meetings with managers and/or team members to review vulnerabilities and improve the Vulnerability Remediation/Management and Security Operations processes
4. Vulnerability Remediation
   1. Security analysis skills - use experience in security to analyze vulnerabilities and brainstorm/perform relevant remediation actions
   2. Meet with, communicate, and influence relevant stakeholders to complete action items to remediate open vulnerabilities
   3. Reporting skills - provide accurate and timely reporting regarding ongoing activities and metrics
   4. Lessons learned - proactively document lessons learned from applicable vulnerabilities and create/modify best practices for engineers
5. Key Management
   1. Manage and rotate security keys according to best practices/defined processes
6. Scripting and Operating System Skills
   1. Ability to use the command line, run SQL queries, and create Python scripts for various tasks such as querying data sets to produce vulnerability metrics for reporting

Preferred

1. (> 5 yrs) - Security Operations activities such as configuring and/or improving security controls (e.g. key management)
2. Organize backlog of action items (vulnerabilities) with keen attention to detail
3. Problem-solving skills - ability to review vulnerabilities and brainstorm action items and persist until fully remediated
4. Communicate transparently with the Vulnerability and Risk Management team regarding ongoing activities and metrics