Specialist - Information Security

6+ years of Vulnerability Management implementation experience
Understanding of vulnerability classes (OWASP) and how they can be exploited
Experience analyzing risk and prioritization of vulnerability remediation
Experience validating vulnerability reports
Understanding of the overall threat and vulnerability management process, including metrics to measure performance
Expertise with vulnerability scanners such as Tenable, Qualys, or Rapid7
Expertise on managing EDR tool such as Crowdstrike.
Experience with AWS or Azure
Experience with Web application scanning and mitigation
Perform security architecture reviews for major engineering initiatives in multi-cloud environment
Asses current threat landscape and business needs to prioritize workload effectively
Examine systems and applications to understand current security posture
Advocate for security best practices to engineering organization
Be a security partner for engineering product groups & guide them through multiple initiatives
Perform cryptographic operations like certificate lifecycle management and code signing

Qualifications :

Bachelor's degree in information technology or related field
Information security experience in higher education or state/local government
Information security related training or certifications