Security Benchmarks Cybersecurity Jobs

1 job found

Today

Information Security Engineer

Sinclair Broadcast Group Cockeysville, MD

Cockeysville, MD

Today

$105k - $135k/yr Full time Application Security Cloud Platforms Cybersecurity Tools

Apply Now

Job Description

Sinclair Broadcast Group is seeking an Information Security Engineer to support an enterprise Vulnerability Management program across business units, cloud, and infrastructure environments. In this onsite role in Cockeysville, MD, you will apply security-in-depth principles to reduce vulnerability risk while coordinating with internal stakeholders and external consultants.

What you will do

Manage vulnerability management processes and solutions, including application security, CIS benchmarks, and other security services as required.
Lead initiatives to develop and mature vulnerability management services in alignment with team and organizational goals.
Drive remediation activities by understanding the impact of findings and establishing communication channels with key stakeholders.
Identify, prioritize, communicate, and mitigate security risks across on-premises and hybrid or multi-cloud environments.
Configure and tune security tools to find weaknesses in systems, applications, databases, and cloud environments.
Support the program through remediation efforts tied to application (DAST) scans, security assessments, vulnerability scans, and related risk management activities and tools.
Produce frequent metrics to measure the efficacy and effectiveness of the vulnerability program, including weekly reporting for vulnerability and risk reduction.
Identify business-critical systems and environments, including mapping data types in enterprise assets, databases, cloud environments, and applications.
Enforce compliance with company policies and standards, while contributing to sustainable security engineering standards and methodologies.
Collaborate with outside vendors and consultants to select tools that meet or exceed department needs.
Maintain awareness of current trends, publications, and emerging technologies related to risk and vulnerability management.
Design, document, and implement procedures and techniques aligned with best practices for evaluating risk, system quality, and integrity.
Track progress for vulnerability management related processes and continuously improve for better speed and operational flow.
Support professional development and training required to excel in the role.

Qualifications

Degree in an IT discipline, or equivalent work experience and/or equivalent IT certifications.
3+ years of experience with vulnerability management, system and application scanning, coordinating remediation efforts, and building partner relationships to achieve program success.
4+ years of experience owning projects, enhancements, or other assignments through completion.
Experience with major cloud vendors including Amazon Web Services (AWS), Azure, and Google Cloud Platform (GCP).
Understanding of applying security controls to operating systems, cloud environments, databases, and applications.
Hands-on experience using vulnerability scanning tools and driving enterprise-level remediation (for example: Qualys, Tanium, Bitsight).
Experience using Asset Management and Reporting Platforms.
Professional security certifications preferred, such as Security+, Network+, CISSP, CEH, or CISM.
Familiarity with security industry standards and best practices, including ISO 27001 and the NIST 800-53 series.
Working knowledge of network and/or security technologies.

Tools and technologies

Vulnerability Management, application security, CIS benchmarks, DAST
AWS, Azure, Google Cloud Platform
Qualys, Tanium, Bitsight
Asset Management and Reporting Platforms
ISO 27001, NIST 800-53 series
Security+, Network+, CISSP, CEH, CISM

Compensation and benefits

Salary: USD 105,000 - 135,000 per year.

Participation in a retirement plan
Life and disability insurance
Health, dental and vision plans
Flexible spending accounts
Sick leave
Vacation time
Personal time
Parental leave
Employee stock purchase plan

View full job page →

Get Security Benchmarks Cybersecurity Jobs alerts

New Security Benchmarks Cybersecurity Jobs, daily.