Overview
The RealPage Information Security Vulnerability Management team monitors and manages risks associated with threats and vulnerabilities faced by our infrastructure, platforms and systems. We work closely with our teammates from IT, Product Development and across the business to coordinate and execute our vulnerability management program. We work with industry-leading tools and implement creative solutions to complex problems.
Responsibilities
As a Vulnerability Security Engineer, you will be the primary point of contact for the Information Security team to interface with the business on remediation efforts for discovered vulnerabilities. Success in this role will be determined by your ability to track and report on multiple data points across multiple lines of business. You will be called upon to provide insights and guidance on discovered vulnerabilities and how to effectively manage the associated risk. Experience with network security scanners and an understanding on how attackers exploit vulnerabilities in the wild are critical skills for this role.
Qualifications
Responsibilities
- Manage vulnerability and exposure assessments across on-premises and multi-cloud hosted environments including AWS, Azure, and GCP
- Validate cloud security controls and identify opportunities to reduce attack surface exposure
- Integrate vulnerability platforms with enterprise security, ITSM, and analytics solutions
- Utilize threat intelligence, exploitability data, and business context to drive risk-based remediation activities
- Identify and prioritize externally exposed assets and attack paths
- Leverage threat intelligence and exploitability data to focus remediation efforts on the highest-risk vulnerabilities
- Create dashboards and report mechanisms that provide leadership visibility into vulnerability trends, SLA attainment, and organizational risk posture
- Collaborate with cloud, infrastructure, DevOps, and application teams to improve security controls throughout the technology lifecycle
- Review compensating controls and ensure findings on vulnerabilities align to risk
- Development and implementation of automated solutions to address daily manual tasks
- Align process and outcomes to all applicable regulations and cybersecurity frameworks
Required Qualification
- Bachelor's degree and minimum 4 years of experience in Information Security, Information Assurance and/or Cyber Security space. Additional relevant experience and professional certifications will be considered in lieu of a degree.
- Experience with automation and scripting languages such as Python or PowerShell
- Experience working with REST APIs and data integrations
- Ability to analyze and manipulate large datasets using scripting or reporting platforms
- Experience in the information security field designing and implementing enterprise security solutions
- Experience with security practices with risk management
- Excellent verbal and written communication skills with a wide range of audiences including technologists, executives, business stakeholders and IT team members
- Must be a critical thinker with strong problem-solving skills
- Knowledge of information security management frameworks, such as ISO 27001, ITIL, COBIT or NIST
- High degree of initiative, dependability and ability to work with little supervision
- Proven ability in security process and organizational design; Current understanding of Industry trends and emerging threats; and knowledge of vulnerability management methodologies and technologies.
Desired Qualification
- Advanced degree in applicable field
- Professional information security certification, such as GCIH, CEH, or OSCP
- Knowledge of common security frameworks and regulations including FFIEC, NYDFS and NIST Cybersecurity Framework
- Knowledge in Scripting languages (e.g. BASH, Python, etc)
