Vulnerability Management Engineer: Cloud Security

Sinclair Broadcast Group; Cockeysville (MD); On-site; USD 105,000 - 135,000; Full time

Benefits offered by this job

Retirement plan

Health, dental and vision insurance

Life and disability insurance

Flexible spending accounts

Sick leave, vacation, personal time

Parental leave

Employee stock purchase plan

Job summary

Sinclair Broadcast Group is seeking an Information Security Engineer focused on vulnerability management to support an enterprise program across on-prem, cloud, and hybrid environments.

You will collaborate with security operations and engineering to drive risk reduction, develop security solutions, and implement remediation across diverse assets. Strong communication and strategic thinking are essential for success.

Qualifications

• Associate's degree in IT discipline, equivalent work experience, or equivalent IT certifications.
• Hands-on experience with vulnerability management and remediation at enterprise scale.
• Experience with cloud platforms and security controls across OS, cloud, DB, and apps.
• Professional security certifications preferred (e.g., Security+, CISSP, CEH, CISM).

Responsibilities

• Manage processes and solutions pertaining to vulnerability management, application security, CIS benchmarks, and other security services as required.
• Excellent communication skills with an ability to collaborate with company stakeholders and business partners.
• Ability to think strategically, plan methodically, and execute tactically.
• Take ownership of professional development and training needed to excel in your role.
• Lead initiatives to develop and mature vulnerability management services as they apply to team and organizational goals.
• Act as an advocate for Information Security objectives while identifying creative solutions to ensure progress is made.
• Drive remediation activities by understanding the impact of findings and developing communication channels with key stakeholders.
• Identify, prioritize, communicate, and mitigate security risks for on-premises and hybrid/multi-cloud environments.
• Produce frequent metrics to measure the efficacy and effectiveness of the vulnerability program.
• Identify business critical systems and environments including mapping data types in enterprise assets, databases, cloud environments, and applications.
• Work with outside vendors and consultants to identify tools to meet or exceed department needs.
• Demonstrate good judgment in identifying and solving problems that aligns with team and corporate goals.
• Enforce compliance with company policies and standards.
• Contribute to the vulnerability management program by driving remediation activities pertaining to application (DAST) scans, security assessments, vulnerability scans, or risk management activities and tools.

Skills

Vulnerability management

System and application scanning

Remediation coordination

Stakeholder collaboration

Cloud environments (AWS, Azure, GCP)

Security controls (OS/Cloud/DB/App)

Security tooling & scanners

Asset management & reporting platforms

Security certifications (preferred)

Education

Associate's degree in IT or equivalent

Security certifications (Security+, CISSP, CEH, CISM)

Tools

Qualys

Tanium

Bitsight

Asset Management Platforms

Reporting Platforms

Job description

Sinclair Broadcast Group is seeking an Information Security Engineer focused on vulnerability management to support an enterprise program across on-prem, cloud, and hybrid environments.

You will collaborate with security operations and engineering to drive risk reduction, develop security solutions, and implement remediation across diverse assets. Strong communication and strategic thinking are essential for success.