Senior Vulnerability Management Engineer, Cisco Meraki

• We are looking for people who are passionate about security and eager to learn the ropes of vulnerability management (reporting, triaging and mitigation)
• Have 5+ years of vulnerability management experience, triaging and remediating tickets from a variety of scanning tools
• Are familiar with common Security vulnerabilities (OWASP Top 10, CWE Top 25)
• Have experience building out and/or improving vulnerability management programs, growing the scope of programs, and contributing to automated solutions for those programs
• Have experience with compliance programs (PCI-DSS, FedRAMP, SOC1/2, Etc.) and Security Framework/Standards (NIST SP800, CSF, etc.)
• Have experience with network security concepts
• Have experience working in a containerized environment
• Are a self-starter and have the ability to take initiative
• Have experience using Jira and other Atlassian software
• Can successfully drive the mitigation of security issues with other teams
• Have familiarity with software development languages (i.e. Python, Ruby, etc)
• Have strong project management and organizational skills with attention to detail
• Know and love learning about the latest security tools, infrastructure, and industry best practices
• Are familiar with risk management concepts and can confidently identify and accept risks within vulnerability management programs

Desirable

• As a member of the Security Operations team, you will have a significant impact on the security of millions of Cisco Meraki users all around the world
• Perform vulnerability management engineering tasks, including review of vulnerability scanning reports, assessment severity, triaging vulnerabilities and shepherding Jira tickets through to remediation/mitigation
• Experience with Vulnerability Management, Information Security Domains and Vulnerability Detection/Response from process to tools (e.g. Qualys, JFrog Xray, Wiz | Secure Everything You Build and Run in the Cloud, JupiterOne)
• Identify gaps in the vulnerability management end-to-end workflow and lead process optimization efforts to improve the program
• Work closely with and provide mentorship to cross-functional engineering teams in mitigating and remediating vulnerabilities
• Quickly identify automation bugs and report them, prioritizing issues based on risk/vitality. Troubleshoot identified bugs to the best of your ability and partner with the development team to resolve
• Investigate vulnerability and exploit alerts, understand how our environment may be impacted, and calculate severity scores using attack complexity
• Help maintain scanning tools by performing regular inventory maintenance and hygiene tasks
• Review CVEs identified as deviations and make risk exceptions when appropriate
• Guide engineering teams on security best practices and patch management industry standards