Senior Vulnerability & Cloud Security Engineer

Verily Health; Raleigh (NC); On-site; USD 166,000 - 186,000; Full time

Job summary

Verily Health is seeking an exceptional information security engineer to support its Information Security and Privacy Risk Management function. The role combines a deep understanding of security technologies with a strong compliance background and will work closely with the Governance, Risk and Compliance team to ensure regulatory readiness, including FedRAMP.

You will manage vulnerability management programs, track remediation efforts, and produce regulator reports to demonstrate ongoing

Qualifications

• BA/BS in Computer Science, Engineering, MIS or related field.
• 5 years of experience in Information Security or related domains.
• 3 years experience with NIST/FedRAMP compliance audits.
• Strong knowledge of cloud security architecture, web application security, vulnerability management, and security engineering.
• Excellent written and verbal communication skills.

Responsibilities

• Manage tools and inputs that are part of the Vulnerability Management program.
• Track remediation tasks and engage with owners to ensure vulnerability management compliance.
• Provide regulator weekly/monthly reports for FedRAMP certifications and/or remediations (e.g., POA&M).
• Apply understanding of federal government compliance (e.g., FISMA, FedRAMP) to report on process and operational readiness.
• Keep abreast of new threats and validate risk using vulnerability management, scanning and red team activities.

Skills

Cloud security architecture

Web application security

Vulnerability management

Security engineering

Education

BA/BS in Computer Science, Engineering, MIS

Tools

GCP

AWS

Kubernetes

Job description

Verily Health is seeking an exceptional information security engineer to support its Information Security and Privacy Risk Management function. The role combines a deep understanding of security technologies with a strong compliance background and will work closely with the Governance, Risk and Compliance team to ensure regulatory readiness, including FedRAMP.

You will manage vulnerability management programs, track remediation efforts, and produce regulator reports to demonstrate ongoing