Senior Vulnerability Management Engineer

Jobtailor; Arizona; On-site; USD 120,000 - 180,000; Full time

Job summary

LPL Financial seeks an experienced Vulnerability Management leader to mature the enterprise program across the organization and subsidiaries. You will act as the SME across cloud and on-prem environments, drive remediation policies, and collaborate with security, IT, and engineering teams.

The role emphasizes KPI development, risk mitigation, and ongoing improvement of vulnerability processes, with a focus on cloud security posture and cross-functional coordination.

Qualifications

• 5+ years in information security within a large enterprise
• 5+ years vulnerability management experience with major tools
• Familiar with vulnerability management processes: identification, analysis, reporting, remediation
• Advanced knowledge of cloud platforms and misconfigurations/vulnerabilities
• Experience in regulated/financial services environments
• Excellent communication with technical and non-technical stakeholders

Responsibilities

• Execute and mature LPL Financial’s Vulnerability Management program across LPL and its subsidiaries
• Serve as a vulnerability management SME across Microsoft, Open Systems, virtualization, networking, databases, and cloud platforms
• Define and implement processes, policies, and procedures governing vulnerability remediation
• Track vulnerabilities from identification through resolution, follow up with remediation owners, and escalate risk as necessary
• Lead enterprise-visible initiatives to improve the Vulnerability Management program
• Partner with security, IT, infrastructure, cloud, engineering, application teams, and third-party vendors
• Assess vulnerability impacts and implement mitigating controls
• Recommend measures to manage and remediate vulnerabilities and reduce information-resource risk
• Promote vulnerability-management best practices and security awareness
• Manage and maintain vulnerability-management platforms, troubleshoot issues, and ensure platform operations
• Review and maintain cloud security posture management policies
• Implement and manage CSPM tools for automated scanning and analysis of cloud resources, containers, and serverless functions
• Monitor current vulnerability exploitation techniques and exploits
• Develop and improve vulnerability-management KPIs, metrics, and trending
• Participate in and lead new projects as needed

Skills

Vulnerability Management

Cloud Security Posture Management

Vulnerability Analysis

Risk Mitigation

Vulnerability Remediation

Cloud Misconfig Identification

KPI Development

Vulnerability Tracking

Security Best Practices

Vulnerability Types Understanding

Communication Skills

Analytical Skills

Interpersonal Skills

Education

Bachelor's/Master's in Information Security or CS or Engineering

Tools

Qualys

InsightVM/Rapid7

Wiz

Nessus

CSPM Tools (Prisma/Laceworks/Orca/XPanse)

Job description

• Execute and mature LPL Financial’s Vulnerability Management program across LPL and its subsidiaries
• Serve as a vulnerability management SME across Microsoft, Open Systems, virtualization, networking, databases, and cloud platforms
• Define and implement processes, policies, and procedures governing vulnerability remediation
• Track vulnerabilities from identification through resolution, follow up with remediation owners, and escalp risk as necessary
• Lead enterprise-visible initiatives to improve the Vulnerability Management program
• Partner with security, IT, infrastructure, cloud, engineering, application teams, and third-party vendors
• Assess vulnerability impacts and implement mitigating controls
• Recommend measures to manage and remediate vulnerabilities and reduce information-resource risk
• Promote vulnerability-management best practices and security awareness
• Manage and maintain vulnerability-management platforms, troubleshoot issues, and ensure platform operations
• Review and maintain cloud security posture management policies
• Implement and manage CSPM tools for automated scanning and analysis of cloud resources, containers, and serverless functions
• Monitor current vulnerability exploitation techniques and exploits
• Develop and improve vulnerability-management KPIs, metrics, and trending
• Participate in and lead new projects as needed

Requirements

• 5+ years of practical experience in information security within a large enterprise environment
• 5+ years of vulnerability management experience working with vulnerability management tools such as Qualys, InsightVM/Rapid7, Wiz, Nessus, etc.
• Familiarity with industry standard security best practices and vulnerability management processes including identification, analysis, reporting, and remediation
• Advanced knowledge of major cloud platforms, their deployable resources, common cloud misconfigurations/vulnerabilities, and remediation
• In-depth understanding of vulnerability types and techniques/compensating controls to mitigate associated risk
• Experience with Cloud Security Posture Management tools such as Wiz, XPanse, Prisma, Laceworks, Orca
• Experience reviewing, analyzing, managing, and remediating security vulnerabilities and misconfigurations in cloud resources
• Experience at a financial services/technology company or in a regulated industry
• Ability to communicate with technical and non-technical stakeholders at all organizational levels
• Strong analytical, interpersonal, and communication skills
• Valid U.S. work authorization that does not require employer sponsorship
• Bachelor's and/or Master's degree in Information Security, Engineering, or Computer Science preferred

Core Competencies

Demonstrates extensive experience in Vulnerability Management, including the implementation of processes and policies, and the use of vulnerability management tools. Possesses strong analytical and communication skills to effectively engage with both technical and non-technical stakeholders.

Highest-signal resume keywords

• Vulnerability Management Experience
• Cloud Security Posture Management
• Vulnerability Management Tools Proficiency
• Information Security Expertise
• Analytical Skills

Hard Skills

• Vulnerability Management
• Cloud Security Posture Management
• Vulnerability Analysis
• Risk Mitigation
• Vulnerability Remediation
• Cloud Misconfiguration Identification
• KPI Development
• Vulnerability Tracking
• Security Best Practices
• Vulnerability Types Understanding

Soft Skills

• Interpersonal Skills
• Communication Skills
• Analytical Skills

Industry Keywords

• Information Security
• Financial Services
• Regulated Industry
• Enterprise Environment
• Vulnerability Management Processes

Tools & Technologies

• Qualys
• InsightVM/Rapid7
• Wiz
• Nessus
• CSPM Tools
• Prisma
• Laceworks
• Orca
• XPanse