Information Security Engineer - Vulnerability Management III

Hudson Manpower seeks an Information Security Engineer with a focus on Vulnerability Management III to support day-to-day data security operations, monitor IT policy compliance, and coordinate investigation and reporting of security incidents. The role emphasizes vulnerability management across infrastructure and applications and is based in Cincinnati, OH with remote work options.

Responsibilities

• Define, deploy, and sustain enterprise security tools and architectures in collaboration with cross-functional teams.
• Strengthen the network vulnerability management program across in-scope subsidiaries and affiliates.
• Scope security environments and lead the onboarding of new applications, programs, processes, projects, and initiatives into the Enterprise Vulnerability Management Program.
• Communicate, escalate, support, and direct the remediation of open vulnerabilities spanning infrastructure, application security, and configuration management.
• Perform security research on threats and remediation techniques, advise IS/IT teams, and oversee their implementation.
• Proactively monitor and investigate security alerts from managed security service providers and in-house security tools.
• Conduct risk assessments to evaluate control effectiveness and assess the impact of proposed changes to processes, applications, and systems.
• Provide ad hoc reporting and control evidence as required.
• Perform threat analysis and coordinate incident response by interpreting security events.
• Support operational information security responsibilities including developing and maintaining standards, procedures, and guidelines for the Enterprise Vulnerability Management Program.
• Share knowledge and industry best practices with team members.
• Serve as a security engineer and consultant on projects.

Requirements

• Experience with Brinq.
• Strong communication and presentation abilities, with a proven track record of presenting to senior leaders and large audiences on matters affecting major projects and critical functionality.
• Demonstrated leadership in implementations and project execution.
• Experience with referrals to principal.
• Proven, ongoing experience in vulnerability management, security engineering, and security consulting, among other areas.
• Proven experience with proactive threat management, research, escalation, and discovery activities.
• Foundational security expertise.
• Solid understanding of popular security tooling and how security architecture interrelates with processes and tooling.

Technologies

• Qualys
• Brinqa
• Archer
• ServiceNOW
• Checkmarx
• Prisma
• AWS

Benefits

• Competitive base compensation
• Medical, dental, and vision insurance coverage
• Optional life and disability coverage
• 401(k) with company match and optional profit sharing
• Paid vacation
• Paid bench time
• Training allowance
• Eligibility to earn referral bonuses

Location

Remote work option with base location in Cincinnati, OH.