CISSP, A+, Security+, CEH, CISA, CRISC, or other IT security operations/vulnerability management certifications is a plus, but not required.
Education and Experience "
Three (3) years of enterprise-class information technology and security vulnerability management experience with the capabilities in elevating a vulnerability program with proper reporting in place and ability to identify enhancements.
Three (3) years of relevant experience in a supervisory capacity managing small to medium sized teams in a large IT enterprise environment.
Strong hands-on experience and knowledge with Cloud Technologies: (e.g., related to Fundamentals, Security, Amazon AWS, Microsoft Azure, Google Cloud Platform).
Strong knowledge and experience evaluating, designing, testing, and supporting hardware and software-based security.
Strong knowledge and experience with information security and network communications practices and principles, technologies, and systems.
Proficient knowledge and experience with vulnerability scanning plus risk and mitigation best practices.
Ability to stay knowledgeable of cybersecurity trends and emerging threats.
Proficient knowledge and proven experience with the following skillsets:
Networking/Data Communications.
Risk Management.
Operating Systems (e.g., Windows/Linux).
Vulnerability management tools such as Tenable and Palo Alto Xpanse.
Other Security Tool sets/categories (e.g., Firewalls, Routers/switches, Database, Web Servers, Applications); Common vulnerabilities, CVEs, and CWEs; Encryption and cipher technologies
Experience with security frameworks such as NIST (e.g., NIST 800-53) and CIS.
Demonstrated experience and success with development and promulgation of enterprise-class security policy and standards.
Demonstrated experience and success with completion of risk assessments and vulnerability assessments.
LAN/WAN operational experience, including networking, OS, web/application/Database servers, storage, hardware, firewalls, and monitoring and detection tools.
Experience in scrum, kanban and SAFe.
WHAT YOU'LL DO:
Job Responsibilities:
Collaborate with cross-functional teams, including IT, engineering, product, legal, and compliance, to integrate security requirements into business processes and the product development lifecycle.
Manage the planning, execution, and delivery of IT and security projects, ensuring adherence to timelines, budgets, and quality standards.