Lead Cybersecurity Engineer (Vulnerability Scanning)

The core function of the Lead Information Security Engineer (Vulnerability Scanning) is to support the Cybersecurity Engineering Manager in achieving Vulnerability Management goals through the use of vulnerability scanning, assessment, reporting tools, and automation.  Assignments at this level require working closely with information asset owners and other members of the Enterprise Risk & Resiliency Cybersecurity team to identify and assess security vulnerabilities.  This position requires strong technical knowledge of operating system platforms, related applications, vulnerability assessment platforms, and scripting/automation.  The successful job candidate should stay informed of current events in the security industry, including the latest exploits and threats, as well as preventative measures.  Must clearly demonstrate above standard Cybersecurity and Vulnerability Management competence.

Strategy & Planning

• Participate in the planning and design of vulnerability assessment tools and capabilities, under the direction of the IT Security Manager, where appropriate.
• Participate in the creation and maintenance of enterprise security documents (policies, standards, guidelines, and procedures) under the direction of the IT Security Manager, where appropriate.
• Provide advanced technical expertise and direction regarding vulnerabilities and required remediation efforts to IT staff.
• Lead the evaluation and implementation of Vulnerability Scanning solutions.
• Develop security solutions that facilitate the company’s strategic business needs.
• Conduct research on emerging technologies in support of security efforts and recommend technologies that will increase the enterprise security posture.

Acquisition & Deployment

• Recommend security controls and systems to support business goals of the company.
• Implement security systems that have positive budgetary impact by aligning cost of security solutions with risk.
• Enhance the company’s information assets by contributing to its security, integrity, efficiency, availability, and accuracy.
• Work closely with Infrastructure and Engineering teams to plan, coordinate, and implement security measures to remediate vulnerabilities across the environment, including IT infrastructure, applications, and Industrial Control Systems.
• Maintain up-to-date detailed knowledge of the cybersecurity industry including awareness of new or revised security solutions, improved security processes, and the development of new attacks and threat vectors, especially related to security vulnerabilities.

Operational Management

• Participate in the secure design, engineering, configuration, operation, and maintenance of Vulnerability Scanning platforms.
• Work in collaboration with infrastructure and support teams to review and remediate security-related vulnerabilities affecting a variety of Operating Systems platforms (Windows, Linux, macOS, iOS, etc.).
• Perform strategic analysis; apply advanced principles, theories, and concepts to resolution of problems.
• Establish and communicate design and architecture standards via mentoring, technical presentations, and white papers.
• Interact with all levels of employees and vendors, including executive management, technical personnel, and contractors.
• Maintain familiarity with industry security standards and baselines, such as CVE, CVSS, CIS, NIST, etc.
• Maintain operational configurations of all in-place security solutions as per the established baselines.
• Monitor in-place Vulnerability Scanning solutions for efficient and effective operations.
• Participate in investigations into potential security events, with a focus on security vulnerability exposure.
• Participate in vulnerability assessments and security audits.
• Provide on-call support for in-place Vulnerability Scanning solutions, as needed.
• Track daily work in project management software.

Incidental Functions

• Assist with Change Management preparations and implementations when needed, providing technical subject matter expertise in the Vulnerability Scanning area.
• Evaluate Vulnerability Scanning services and products; perform product proof of concept analysis.
• Lead the integration of Vulnerability Scanning solutions, with assistance from other members of the te