Senior Cyber Security & Vulnerability Management Lead

Constellation Energy Corp.; Baltimore (MD); On-site; USD 123,000 - 137,000; Full time

Job summary

Constellation Energy Corp. in the United States seeks a Senior Cyber Security Vulnerability Management Analyst to conduct formal tests on web apps, networks, and systems, document deviations from standards, and perform regular vulnerability assessments with mitigations.

You will collaborate with DevOps teams to integrate security into CI/CD and mentor junior staff. The role requires hands-on expertise across IT/OT environments, strong communication, and a track record in threat modeling,

Qualifications

• Bachelor's degree in Information Systems with 5+ years of experience.
• Experience in performing application security vulnerability assessment using manual testing or automated tools.
• Proven data architecture and modeling skills.
• Experience integrating application security into CI/CD and automation.
• 2+ years in Agile/DevOps with Docker/Kubernetes, IaC, CI tools.
• Experience with security testing tools in pipelines (Fortify, ShiftLeft, Checkmarx, Invicti, WhiteSource).
• Source code management experience (GitLab, GitHub, Bitbucket).
• Cloud environments (AWS, Azure, GCP) and Unix-like systems.
• Knowledge of networking from a DevOps security perspective.

Responsibilities

• Perform security architecture reviews in design and production phases.
• Identify threats and mitigation through vulnerability assessments.
• Collaborate with developers to embed security in DevOps processes.
• Remediate security vulnerabilities with development teams.
• Improve secure coding practices and security requirements.

Skills

Security testing

DevSecOps

CI/CD automation

Docker/Kubernetes

Jira/ServiceNow

Python scripting

OAuth/SSO

Education

Bachelor's degree in Information Systems

Tools

Fortify

ShiftLeft

Checkmarx

Invicti

WhiteSource

Job description

Constellation Energy Corp. in the United States seeks a Senior Cyber Security Vulnerability Management Analyst to conduct formal tests on web apps, networks, and systems, document deviations from standards, and perform regular vulnerability assessments with mitigations.

You will collaborate with DevOps teams to integrate security into CI/CD and mentor junior staff. The role requires hands-on expertise across IT/OT environments, strong communication, and a track record in threat modeling,