Application Vulnerability Management Specialist, Associate

Job Description

We are seeking a highly skilled and motivated Application Vulnerability Management Specialist to join our team. The successful candidate will be responsible for identifying, evaluating, and mitigating security vulnerabilities within our applications. This role involves working closely with various departments to ensure the security and integrity of our IT environment.

Key Responsibilities

• Vulnerability Assessment: Conduct regular vulnerability assessments to identify security weaknesses.
• Risk Evaluation: Evaluate the severity of vulnerabilities and prioritize remediation efforts based on risk assessment.
• Remediation Coordination: Collaborate with application owners, developers, and IT operations to develop and implement remediation plans for identified vulnerabilities.
• Monitoring and Reporting: Continuously monitor the application environment for new vulnerabilities and provide regular reports on the status of vulnerability management efforts.
• Training and Awareness: Provide training and awareness programs to educate staff on application security best practices and vulnerability management processes.
• Compliance: Ensure compliance with relevant security standards and regulations, such as NIST, CISA, and internal security policies.
  
  

Qualifications

• Education: Bachelor's degree in Computer Science, Information Security, or a related field.
• Experience: Minimum of 3-5 years of experience in application security, vulnerability management, or a related field.
• Technical Skills: Proficiency with vulnerability scanning tools (e.g., Tenable, Rapid7), and familiarity with security frameworks and standards (e.g., NIST, CISA).
• Certifications: Relevant certifications such as CISSP, CEH, or OSCP are preferred.
• Communication: Excellent verbal and written communication skills, with the ability to effectively communicate complex security issues to technical and non-technical stakeholders.
• Problem-Solving: Strong analytical and problem-solving skills, with the ability to think critically and make sound decisions under pressure.
• Team Player: Ability to work collaboratively in a team environment and build strong relationships with colleagues across different departments.
  
  

Preferred Qualifications

• Experience with SaaS Security Posture Management (SSPM) tools and external attack surface management.
• Knowledge of breach attack simulation and configuration auditing.
• Familiarity with application security testing methodologies, including Dynamic Application Security Testing (DAST) and Static Application Security Testing (SAST).
  
  

Primary Location Full Time Salary Range of $100,000 - $130,000.

About Us

Jefferies is a leading global, full-service investment banking and capital markets firm that provides advisory, sales and trading, research, and wealth and asset management services. With more than 40 offices around the world, we offer insights and expertise to investors, companies, and governments.

At Jefferies, we are committed to building a culture that provides opportunities for all employees regardless of our differences and supports a workforce that is reflective of the communities where we work and live. As a result, we are able to pool our collective insights and intelligence to provide fresh and innovative thinking for our clients.

Jefferies is committed to creating and sustaining a workforce that welcomes individuals from all backgrounds to apply. Our employment decisions are made without regard to race, creed, color, national origin, ancestry, religion, pregnancy, age, medical condition, physical or mental disability, marital status, domestic partner status, sex, sexual orientation, gender, gender identity or expression, veteran or military status, genetic information, reproductive health decisions, or any other factor protected by applicable law. We are committed to hiring the most qualified applicants and complying with all federal, state, and local equal employment opportunity laws. As part of this commitment, Jefferies will extend reasonable accommodation to individuals with disabilities, as required by applicable law.

The salary offered will take into consideration an individual’s experience level and qualifications. In addition to salary, Jefferies Financial Group is proud to offer a comprehensive benefits package to eligible, full-time employees or part-time employees, who are scheduled to work at least 30 hours or more per week, including an annual discretionary incentive and retention bonus, competitive employee benefits, including: medical, dental & vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Jefferies also offers paid time off packages that include planned time off (e.g., vacation), unplanned time off (e.g., sick leave), and paid holidays, and for full-time employees, paid parental leave.