Security Engineer, Vulnerability Management

Yum! Brands; Louisville (KY); On-site; USD 118,000 - 148,000; Full time

Job summary

Yum! Brands is seeking a Security Engineer III to support vulnerability management and penetration testing across global security and IT teams. You will facilitate vulnerability scanning, communicate findings, and track remediation efforts with external providers as needed.

The role emphasizes collaboration across brands and third-party platforms, with a focus on robust vulnerability management practices and guidance to team members.

Qualifications

• 3+ years of experience in vulnerability management or related field.
• Experience with vulnerability management tools and methodologies.
• Strong analytical and communication skills.

Responsibilities

• Configure and maintain vulnerability management and penetration testing platforms.
• Plan, execute, and assess vulnerability scanning and penetration testing services.
• Provide reporting details of vulnerabilities and remediation guidance.
• Act as a technical specialist for vulnerability management initiatives.
• Collaborate to ensure compliance with policies, laws, and regulations.
• Drive remediation with system owners and developers to address high-risk issues.
• Facilitate engagements between vendors and internal teams for security testing.
• Create and update processes and supporting documentation for vulnerability management.
• Provide training and mentorship on vulnerability management practices.
• Stay current with threats and proactively assess impact.

Skills

Vulnerability management

Analytical thinking

Problem solving

Team collaboration

Communication

Initiative

Education

Bachelor's degree in computer science or information security

Tools

Nessus

Qualys

Rapid7

Job description

The Security Engineer III is a role designed for individuals with experience in cybersecurity and IT systems. They support vulnerability management program processes and procedures, using enterprise security tools to facilitate vulnerability identification and reporting. As a Security Engineer, you will frequently interact with members of all our brand's Security and IT teams, as well as third-party platform providers. In this dynamic, global environment, you will be responsible for facilitating vulnerability scanning and penetration testing, communicating vulnerability findings, and tracking vulnerability remediation efforts.

Key Responsibilities

• Configure and maintain vulnerability management and penetration testing platforms
• Plan, execute, and assess vulnerability scanning and penetration testing services
• Manage the output from vulnerability scanning and penetration testing to provide comprehensive reporting details of the vulnerabilities, their potential impact, and suggested remediations as needed
• Act as a technical specialist, providing technical support for vulnerability management initiatives and penetration testing engagements
• Collaborate across functions to ensure vulnerability management, security programs, and technical controls comply with policies, laws, and regulations.
• Drive remediation efforts by partnering with system owners and developers to automate, prioritize and assist in resolving high-risk vulnerabilities
• Facilitate penetration testing engagements between external vendors and internal teams to uncover and address security weaknesses
• Create and update processes and procedures, along with supporting documentation, for the vulnerability management program
• Provide training, guidance, and mentorship to team members on vulnerability management practices and tools
• Facilitate vulnerability management reviews and audits with teamsStay current with emerging threats and vulnerabilities and proactively assess their potential impact on the organization

Qualifications

• Bachelor’s degree in computer science, information security, or a related field
• 3+ years of experience in vulnerability management or related field
• Strong knowledge of vulnerability management tools and methodologies (e.g., Nessus, Qualys, Rapid7).
• Excellent analytical and problem-solving skills with the ability to tackle complex technical challenges.
• Ability to solve problems in a dynamic team environment and handle multiple assignments in a timely manner.
• Strong communication skills and the ability to work collaboratively with cross-functional teams.
• Demonstrated initiative in improving processes, mentoring others, and expanding technical capabilities.

Salary Range: $117,800 to $147,600 annually + bonus eligibility. This is the expected salary range for this position. Ultimately, in determining pay, we'll consider the successful candidate’s location, experience, and other job-related factors.