Senior Security Engineer

<p><u><b>Posting Type</b></u></p><p>Hybrid</p><p></p><p></p><p><u><b>Job Overview</b></u></p>As a Senior Security Engineer on the Vulnerability Management team at Relativity, you will work with other teams both inside and outside of the Security department to ensure the security of our infrastructure and products. <br/><br/>This is an opportunity to work in a security department focused on DevSecOps in a rapidly expanding tech company, where you'll be helping secure both company infrastructure and a dynamic web system built on top of containers, native cloud applications, and other modern technology stacks. <br/><br/>These things will be key to be successful in this role:  <br/><br/>You are motivated to be part of an international team in a security-focused environment within the Legal Tech industry.  <br/><br/>You want to help empower engineers to build secure products.  <br/><br/>You want to have a real impact on the security of the leading eDiscovery/Legal Tech product. <br/><br/>You enjoy and thrive in cross-functional collaboration.  <br/><br/>You enjoy being exposed to a variety of modern technologies.<p></p><p></p><p><u><b>Job Description and Requirements </b></u></p><p><span><span>What are the core duties of this role?</span></span><span> </span></p><ul><li><p><span><span>Maintain </span><span>v</span><span>ulnerability </span><span>s</span><span>canning </span><span>t</span><span>ools</span><span> </span><span>to </span><span>optimize</span><span> the data received from them</span><span> to track risk</span><span>. </span><span>Ensure the continuous health and </span><span>optimal</span><span> performance of vulnerability scanning tools by performing regular updates, troubleshooting issues, and implementing enhancements. Monitor tool performance, address any technical issues promptly, and collaborate with vendors for support and improvements.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Implement and </span><span>d</span><span>irect Vulnerability Management </span><span>p</span><span>rocesses</span><span>. </span><span>Oversee the entire vulnerability management lifecycle</span><span>: </span><span>Discovery, Prioritization, Assessment, Reporting, Remediation, and Verification.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Set and achieve team </span><span>objectives</span><span> aimed at reducing overall risk and </span><span>identifying</span><span> new areas of exposure.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Develop automation to reduce workload and enhance efficiency (e.g., GitHub Actions).</span></span><span> </span></p></li></ul><ul><li><p><span><span>Collaborate with internal teams to </span><span>validate</span><span> and remediate findings from vulnerability scans, third-party assessments, and the Bug Bounty Program.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Continuously evaluate and improve configuration management practices to enhance efficiency, effectiveness, and compliance.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Perform</span><span> and </span><span>assist</span><span> others with</span><span> threat modeling to assess the severity of a </span><span>vulnerability</span><span>.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Organize and lead knowledge-sharing sessions and events to enhance the skills and </span><span>expertise</span><span> of the team, fostering a culture of continuous learning and improvement.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Act as an escalation point on the Vulnerability Management team and represent the team in meetings with external teams</span><span> and customers.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Enhance risk visibility by creating and reporting on relevant metrics.</span></span></p></li></ul><p></p><p><b><span>Mi</span></b><b><span>nimum <span>qualifications: </span></span></b><span> </span></p><ul><li><p><span><span>Bachelor's degree in security management, Computer Science, Information Systems, or related field, or relevant experience.  </span></span><span> </span></p></li></ul><ul><li><p><span><span>Minimum of 4 years of experience in security preferably in a high-security environment</span><span>.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Experience </span><span>with </span><span>modern </span><span>vulnerability scanning tools.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Proven ability to deliver on large-scale, cross-functional projects</span><span>.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Excellent verbal and written communication skills, with the ability to articulate complex security concepts to both technical and non-technical stakeholders. </span></span><span> </span></p></li></ul><ul><li><p><span><span>Strong analytical and problem-solving skills, with a proactive approach to </span><span>identifyin