Job Title: Information Security Engineer - Vulnerability Management III

Hudson Manpower; Columbus (OH); Remote; USD 90,000 - 130,000; Full time

Job summary

A leading company in Ohio is seeking an Information Security Engineer specializing in Vulnerability Management. This role involves enhancing security operations, managing vulnerabilities, and implementing enterprise security tools. Candidates should have strong communication skills and relevant certifications such as CISSP or CISA. Competitive salary and benefits, including medical insurance and 401(k) match, are offered.

Benefits

Competitive base salary

Medical, dental, and vision insurance

401(k) with company match

Paid vacation time

Training allowance

Referral bonuses

Qualifications

• Experience in vulnerability management and security consulting.
• Background in security architecture with popular security tools.
• Scripting/automation experience, preferably in Python.

Responsibilities

• Support day-to-day data security operations and network infrastructure integrity.
• Enhance vulnerability management programs for the organization.
• Conduct risk assessments and support incident response.

Skills

Excellent communication skills

Presentation skills

Vulnerability management

Security engineering

Proactive threat management

Education

CISSP Certification

CISA Certification

CISM Certification

AWS Solutions Architect Certification

Tools

Qualys

Brinqa

Archer

ServiceNOW

Checkmarx

Prisma

Job description

Job Title: Information Security Engineer - Vulnerability Management III

Location: Remote

TOP SKILLS:

Must Have

Brinq

Excellent communication and presentation skills, and a proven background of presenting to senior leaders, large groups, etc. on relevant matters pertaining to large projects and impacting key functionality.

Lead and Implementation Experience

Performing referral to principle

proven consistent experience in vulnerability management, security engineering, security consulting etc

Proven experience with proactive threat management, research, escalation, discovery etc.

Security

Solid understanding of popular security tooling and understanding of security architecture/interconnectedness of processes and tooling.

Nice To Have

CISSP, CISA, CISM, AWS Solutions Architect certifications

GRC/audit management experience

Scripting/automation experience – python preferred

Solid proven experience with tooling such as Qualys, Brinqa, Archer, ServiceNOW, Checkmarx, Prisma (and any AWS experience is great as well)

What You’ll Do

Responsible for performing all functions required to support day-to-day data security operations and accountable for security and networking infrastructure component availability and integrity, monitoring compliance with IT security policy, and coordinating investigation and reporting of security incidents.

Primary Responsibilities:

Define, deliver, and support enterprise security tools and architecture in collaboration with other teams.

Enhance the Bank's network vulnerability management program for in-scope subsidiaries and affiliates.

Define security environments and lead the implementation and onboarding of new applications, programs, processes, projects, and initiatives into the Enterprise Vulnerability Management Program.

Communicate, escalate, support, and guide the resolution of open vulnerabilities, including infrastructure, application security, and configuration management vulnerabilities.

Conduct security research on threats and remediation techniques/technology, make recommendations to IS/IT teams, and oversee their implementation.

Proactively monitor and investigate security alerts from managed security service providers and in-house security tools.

Conduct risk assessments to evaluate the effectiveness of existing controls and determine the impact of proposed changes to business processes, applications, and systems.

Support ad hoc requests for reporting and control evidence, as needed.

Perform threat analysis and incident response by interpreting events.

Support the Bank's operational information security responsibilities, including developing and maintaining standards, procedures, and guidelines for the Enterprise Vulnerability Management Program.

Share knowledge and industry best practices with team members.

Serve as a security engineer/consultant on projects.

What You’ll Get

Competitive base salary

Medical, dental, and vision insurance coverage

Optional life and disability insurance provided

401(k) with a company match and optional profit sharing

Paid vacation time

Paid Bench time

Training allowance offering

You’ll be eligible to earn referral bonuses!