Security Engineer III — Vulnerability & Penetration Management

Yum! Brands; Louisville (KY); On-site; USD 118,000 - 148,000; Full time

Job summary

Yum! Brands is seeking a Security Engineer III to support vulnerability management and penetration testing across global security and IT teams. You will facilitate vulnerability scanning, communicate findings, and track remediation efforts with external providers as needed.

The role emphasizes collaboration across brands and third-party platforms, with a focus on robust vulnerability management practices and guidance to team members.

Qualifications

• 3+ years of experience in vulnerability management or related field.
• Experience with vulnerability management tools and methodologies.
• Strong analytical and communication skills.

Responsibilities

• Configure and maintain vulnerability management and penetration testing platforms.
• Plan, execute, and assess vulnerability scanning and penetration testing services.
• Provide reporting details of vulnerabilities and remediation guidance.
• Act as a technical specialist for vulnerability management initiatives.
• Collaborate to ensure compliance with policies, laws, and regulations.
• Drive remediation with system owners and developers to address high-risk issues.
• Facilitate engagements between vendors and internal teams for security testing.
• Create and update processes and supporting documentation for vulnerability management.
• Provide training and mentorship on vulnerability management practices.
• Stay current with threats and proactively assess impact.

Skills

Vulnerability management

Analytical thinking

Problem solving

Team collaboration

Communication

Initiative

Education

Bachelor's degree in computer science or information security

Tools

Nessus

Qualys

Rapid7

Job description

Yum! Brands is seeking a Security Engineer III to support vulnerability management and penetration testing across global security and IT teams. You will facilitate vulnerability scanning, communicate findings, and track remediation efforts with external providers as needed.

The role emphasizes collaboration across brands and third-party platforms, with a focus on robust vulnerability management practices and guidance to team members.