Financial Services • Investment Management • Life Insurance • Retirement Benefits • Group Benefits
10,000+
September 16
Financial Services • Investment Management • Life Insurance • Retirement Benefits • Group Benefits
10,000+
• Lead the cloud security strategy, including the design and implementation of attack surface reduction and security configurations across all cloud environments (AWS, Azure, GCP, etc.). • Manage and oversee the vulnerability management program, including regular scanning, assessment, prioritization, and remediation of security vulnerabilities. • Collaborate with the Attack Surface Management team to identify and address security risks associated with cloud environments and ensure that they are properly mitigated. • Develop and maintain cloud security policies, procedures, and best practices in alignment with industry standards and regulatory requirements. • Act as a subject matter expert (SME) for cloud and container security, providing guidance to development, operations, and security teams on best practices and emerging threats. • Oversee the implementation of security tools and technologies to monitor and protect cloud infrastructure. • Support and assist security incident response efforts related to cloud environments, working closely with the Incident Response team to support any investigations. • Conduct regular risk assessments and support evaluation of the effectiveness of security controls and identify areas for improvement. • Stay up-to-date with the latest security trends, threats, and technologies, and recommend innovative solutions to enhance the security posture of the organization. • Collaborate with external partners, vendors, and auditors to ensure compliance with security standards and regulations. • Management of requirements for scanning policies, coverage and lifecycle management processes for vulnerabilities and misconfigurations (Qualys, Wiz). This includes configuration-based assessments where automated detections are not available. • Identification and monitoring of high-risk software, services and ports. • Responsible for continuous monitoring of attack surface and ensuring remediation governance via escalation to business and risk advisors. • Partner with support organizations to establish security standards, design requirements and build the roadmap to implement cloud security controls to ensure the secure deployment of cloud-based resources. • Work to Operationalize new processes for cloud and container continuous monitoring. • Provide mentorship, training, and guidance for team members, working with and guiding more junior team members. • Support managers and Prudential leadership on new initiatives and opportunities to grow our security practices. • Ensures proper communication of the program’s results, opportunities, and deficiencies, as needed, to Prudential upper management. • Leverage Security Operations and tool/process specific knowledge to resolve complex technical/process/people problems the team faces. • Partner with leadership to set direction for the future of the VM and Cloud Security monitoring program, while ensuring an accurate understanding and in-depth knowledge of daily operations to provide team recommendations. • Tracking, rating, and ranking of highly critical vulnerabilities along with all coordination with business unit owners to ensure required adherence to SLAs. Responsible for review and approval of remediation deferment requests, escalation where appropriate.
• Bachelor of Computer Science or Software Engineering or experience in related fields. • Experience with agile development methodologies and Test-Driven Development (TDD). • Knowledge of business concepts, tools and processes that are needed for making sound decisions in the context of the company's business. • Ability to learn new skills and knowledge on an on-going basis through self-initiative and tackling challenges. • Ability to coach others with some guidance and effectively leverage diverse ideas, experiences, thoughts, and perspectives to the benefit of the organization. • Strong communication skills, with the ability to effectively communicate complex security concepts to technical and non-technical stakeholders. • Excellent problem solving, communication, and collaboration skills. • Ability to think creatively, innovate and challenge status quo processes or procedures. • Experience using industry-standard vulnerability scanning and security tools (Qualys, Tenable, Wiz, NMAP, Cloud Native – AWS, Azure). • Experience with standard frameworks, such as OWASP, MITRE ATT&CK, and NIST. • In-Depth knowledge of threat intelligence frameworks & methodology that will help aid the response process. • Familiarity with defensive and monitoring technologies such intrusion prevention/detection systems (IPS/IDS), Web Application Firewalls (WAFs) security information and event management systems (SIEMs), firewalls, endpoint protection (EPP) and endpoint detection/response (EDR) tools, as well as user and entity behavior analytics (UEBA). • Advanced experience with several of the following: Proven experience leading security initiatives in cloud environments, including designing and implementing security controls. • Strong understanding of network security, encryption, identity and access management, and incident response. • Relevant certifications (e.g., CISSP, CCSP, AWS Certified Security, GCP Professional Cloud Security Engineer) are highly desirable. • Demonstrated experience in cloud security, vulnerability management, and/or related cybersecurity roles. • Strong experience with cloud platforms (AWS, Azure, GCP) and their security features. • In-depth knowledge of vulnerability management tools (e.g., Qualys, Nessus, Rapid7, Wiz) and cloud security frameworks (e.g., CIS, NIST, ISO 27001).
• Market competitive base salaries, with a yearly bonus potential at every level. • Medical, dental, vision, life insurance, disability insurance, Paid Time Off (PTO), and leave of absences, such as parental and military leave. • Retirement plans: 401(k) plan with company match (up to 4%). • Company-funded pension plan. • Wellness Programs to help you achieve your wellbeing goals, including up to $1,600 a year for reimbursement of items purchased to support personal wellbeing needs. • Work/Life Resources to help support topics such as parenting, housing, senior care, finances, pets, legal matters, education, emotional and mental health, and career development. • Tuition Assistance to help finance traditional college enrollment toward obtaining an approved degree, many accredited certificate programs, and industry designations. • Employee Stock Purchase Plan: Shares can be purchased at 85% of the lower of two prices (Beginning or End of the purchase period), after one year of service.
Apply NowSeptember 16
1001 - 5000
Lead security architecture for FICO's cloud and on-premises environments.
September 16
1001 - 5000
Senior IT Engineer at FICO, focus on Microsoft technologies and cybersecurity.
September 16
1001 - 5000
Seeking an offensive focused Security Engineer to enhance cybersecurity measures.
🇺🇸 United States – Remote
💵 $82.9k - $153.1k / year
⏰ Full Time
🟡 Mid-level
🟠 Senior
👮♂️ Security Engineer
September 16
10,000+
Manage Workday security and compliance at Live Nation Entertainment.
🇺🇸 United States – Remote
💵 $104k - $130k / year
💰 Post-IPO Debt on 2023-01
⏰ Full Time
🟡 Mid-level
🟠 Senior
👮♂️ Security Engineer
September 16
1001 - 5000
Join McAfee’s SOC as an Information Security Specialist to defend against cyber threats.
🇺🇸 United States – Remote
💵 $81.1k - $133.3k / year
💰 Private Equity Round on 1991-09
⏰ Full Time
🟡 Mid-level
🟠 Senior
👮♂️ Security Engineer