Senior Vulnerability & Compliance Security Engineer

Verily Health; Mountain View (CA); On-site; USD 166,000 - 186,000; Full time

Benefits offered by this job

Bonus

Equity

Benefits

Job summary

Verily Health is seeking an information security engineer to support our Information Security and Privacy Risk Management function, focusing on vulnerability management and regulatory compliance. The role collaborates with Governance, Risk and Compliance to ensure ongoing FedRAMP readiness and risk reduction.

The position requires 5 years of information security experience, strong cloud security knowledge (GCP/AWS) and excellent communication skills.

Qualifications

• BA/BS in Computer Science, Engineering, MIS.
• At least 5 years in information security or related field.
• 3 years of experience with NIST/FedRAMP compliance audits.
• Strong knowledge of cloud security, web app security, vulnerability management.

Responsibilities

• Manage tools and inputs that are part of the Vulnerability Management program.
• Track remediation tasks, engage with systems/services owners and stakeholders to ensure vulnerability management compliance.
• Ensure regulator weekly/monthly reports for FedRAMP certifications and remediations (POA&M).
• Apply understanding of federal government compliance (FISMA, FedRAMP) to report on process and readiness.
• Keep abreast of new threats and validate risk using vulnerability management, scanning and red team operations.

Skills

Information security

Vulnerability management

Cloud security architecture

Web application security

NIST/FedRAMP compliance

Security engineering

Communication skills

Education

BA/BS in Computer Science, Engineering, MIS

Tools

Kubernetes

GCP

AWS

Vulnerability scanners

Job description

Verily Health is seeking an information security engineer to support our Information Security and Privacy Risk Management function, focusing on vulnerability management and regulatory compliance. The role collaborates with Governance, Risk and Compliance to ensure ongoing FedRAMP readiness and risk reduction.

The position requires 5 years of information security experience, strong cloud security knowledge (GCP/AWS) and excellent communication skills.