Sr Staff, Infosec Engineering

About the Role

We are seeking a Security Engineer with diversified skillset to join our cybersecurity team. In this role, you will be responsible for planning & engineering our Risk Based Vuln. Prioritization, Cyber Efficiency, IoT security initiatives. You will work closely with cross-functional teams to identify, assess, and remediate vulnerabilities, and provide expert guidance on best practices and emerging threats.

What You'll Do

• Streamline organization’s Vuln. Mgmt. models to a unified risk based Vuln. Mgmt. model

• Experience in Risk based Vulnerability Prioritization and remediation

• Ensure compliance with industry standards and regulatory requirements related to vulnerability management, and develop and maintain vulnerability management policies, procedures, and best practices

• Design, develop, and implement robust security protocols for IoT devices and networks

• Conduct regular vulnerability assessments to identify security weaknesses in IoT systems

• Assess the potential impact of vulnerabilities on business operations and prioritize remediation efforts accordingly, providing recommendations for risk mitigation and security improvements

• Monitor Organization Network for any potential Zero Day Vulnerabilities/Exploits

• Ensure Rapid Response processes are rehearsed & kept up to date to handle any Zero Day Vulnerabilities or real time attacks

• Collaborate with Security Ops & Infosec leadership in developing a mitigation plan for control gaps, TTP’s, IOC’s & Threat Advisories

• Assess the potential impact of vulnerabilities on business operations and prioritize remediation efforts accordingly

• Educate and train staff on IoT security best practices and emerging threats

• Create and maintain comprehensive documentation related to IoT security protocols, incidents, and remediation efforts

Who You Are

• Bachelor's degree in Computer Science, Information Security, or a related field.

• 9+ years of experience in IoT Security, Vulnerability Management or a related field

• Proficiency in IoT security tools and technologies, and experience with security frameworks and standards (e.g., NIST, ISO 27001)

• Strong analytical and problem-solving skills, with the ability to assess complex security issues and develop effective solutions

• Excellent written and verbal communication skills, with the ability to convey technical information to non-technical stakeholders