Security Engineer

Bring your heart to CVS Health. Every one of us at CVS Health shares a single, clear purpose: Bringing our heart to every moment of your health. This purpose guides our commitment to deliver enhanced human-centric health care for a rapidly changing world. Anchored in our brand — with heart at its center — our purpose sends a personal message that how we deliver our services is just as important as what we deliver.
 
Our Heart At Work Behaviors™ support this purpose. We want everyone who works at CVS Health to feel empowered by the role they play in transforming our culture and accelerating our ability to innovate and deliver solutions to make health care more personal, convenient and affordable.

Position Summary

As a Security Engineer on the Vulnerability Scanning Team, you will be responsible for ensuring the effectiveness and reliability of our vulnerability scanning processes. You will work closely with various business units to maintain and expand our scanning capabilities, using tools such as Qualys. Your role will involve troubleshooting, documentation, and collaboration to enhance our security posture.

• Maintain Scanner Health: Ensure the health and performance of vulnerability scanners and scan agents, focusing on maintaining cloud agent scan efficacy.

• Troubleshoot and Resolve Issues: Conduct root cause analysis and resolution for failed scans and unreachable assets. Partner with teams to resolve scan authentication issues.

• Expand Agent Coverage: Drive the ongoing expansion of agent coverage across business units to ensure comprehensive vulnerability assessment.

• Documentation Management: Own the team's Standard Operating Procedures (SoP) documentation. Create and maintain a SharePoint site to house technical documentation and team resources.

• Configure and Manage Scanners: Configure and manage external network-based vulnerability scanners. Identify and address failed authenticated scans.

• Vulnerability Review: Conduct routine weekly reviews of vulnerability false positives and assessments using Archer and other tools.

Required Qualifications

• Minimum of 2 years experience in Cyber Security Vulnerability Management

• 1 year experience in operating, tuning, or maintaining vulnerability scanning tools in large, complex, enterprise environments.

• 2 years of proven experience with Vulnerability scanning tools (any combination, including Qualys, Tenable or Rapid 7)

Preferred Qualifications

• Exceptional communication skills, with the ability to translate technical issues into business risks for stakeholders.

• Ability to work under pressure and in complex situations.

• High level of integrity, professionalism, and attention to detail.

• Ability to articulate technical issues, vulnerability results and explain tools limitations.

• Strong understanding of network security principles and practices.

• Experience with cloud environments and agent-based scanning.

• Excellent problem-solving skills and attention to detail.

• Experience with documentation management and SharePoint is a plus.

Education

Bachelor’s degree or equivalent experience. 

Anticipated Weekly Hours

40

Time Type

Full time

Pay Range

The typical pay range for this role is:

$72,100.00 - $144,200.00

This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls.  The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors.  This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above. 
 
In addition to your compensation, enjoy the rewards of an organization that puts our heart into caring for our colleagues and our communities.  The Company offers a full range of medical, dental, and vision benefits.  Eligible employees may enroll in the Company’s 401(k) retirement savings plan, and an Employee Stock Purchase Plan is also available for eligible employees.  The Company provides a fully-paid term life insurance plan to eligible employees, and short-term and long term disability benefits. CVS Health also offers numerous well-being programs, education assistance, free development courses, a CVS store discount, and discount programs with participating partners.  As for time off, Company employees en