Overview

The RealPage Information Security Vulnerability Management team monitors and manages risks associated with threats and vulnerabilities faced by our infrastructure, platforms and systems. We work closely with our teammates from IT, Product Development and across the business to coordinate and execute our vulnerability management program. We work with industry-leading tools and implement creative solutions to complex problems.

Responsibilities

As a Vulnerability Security Engineer, you will be the primary point of contact for the Information Security team to interface with the business on remediation efforts for discovered vulnerabilities. Success in this role will be determined by your ability to track and report on multiple data points across multiple lines of business. You will be called upon to provide insights and guidance on discovered vulnerabilities and how to effectively manage the associated risk. Experience with network security scanners and an understanding on how attackers exploit vulnerabilities in the wild are critical skills for this role.

Qualifications

Responsibilities

Manage vulnerability and exposure assessments across on-premises and multi-cloud hosted environments including AWS, Azure, and GCP
Validate cloud security controls and identify opportunities to reduce attack surface exposure
Integrate vulnerability platforms with enterprise security, ITSM, and analytics solutions
Utilize threat intelligence, exploitability data, and business context to drive risk-based remediation activities
Identify and prioritize externally exposed assets and attack paths
Leverage threat intelligence and exploitability data to focus remediation efforts on the highest-risk vulnerabilities
Create dashboards and report mechanisms that provide leadership visibility into vulnerability trends, SLA attainment, and organizational risk posture
Collaborate with cloud, infrastructure, DevOps, and application teams to improve security controls throughout the technology lifecycle
Review compensating controls and ensure findings on vulnerabilities align to risk
Development and implementation of automated solutions to address daily manual tasks
Align process and outcomes to all applicable regulations and cybersecurity frameworks

Required Qualification

Bachelor's degree and minimum 4 years of experience in Information Security, Information Assurance and/or Cyber Security space. Additional relevant experience and professional certifications will be considered in lieu of a degree.
Experience with automation and scripting languages such as Python or PowerShell
Experience working with REST APIs and data integrations
Ability to analyze and manipulate large datasets using scripting or reporting platforms
Experience in the information security field designing and implementing enterprise security solutions
Experience with security practices with risk management
Excellent verbal and written communication skills with a wide range of audiences including technologists, executives, business stakeholders and IT team members
Must be a critical thinker with strong problem-solving skills
Knowledge of information security management frameworks, such as ISO 27001, ITIL, COBIT or NIST
High degree of initiative, dependability and ability to work with little supervision
Proven ability in security process and organizational design; Current understanding of Industry trends and emerging threats; and knowledge of vulnerability management methodologies and technologies.

Desired Qualification

Advanced degree in applicable field
Professional information security certification, such as GCIH, CEH, or OSCP
Knowledge of common security frameworks and regulations including FFIEC, NYDFS and NIST Cybersecurity Framework
Knowledge in Scripting languages (e.g. BASH, Python, etc)

Security Engineer II