Job Summary
Job Title: Lead Vulnerability Management Engineer Position Type: Full-Time Job Overview: The Lead Vulnerability Management Engineer will be responsible for leading and managing the organization's vulnerability management program. This role requires a deep understanding of vulnerability assessment tools, particularly Rapid7 Insight VM and Qualys. The ideal candidate will possess strong leadership skills, a thorough understanding of vulnerability management processes, and excellent written and verbal communication abilities. Key Responsibilities: Leadership and Strategy: - Lead the Vulnerability Management team in designing, implementing, and managing the vulnerability management program. - Develop and maintain vulnerability management policies, procedures, and standards in alignment with industry best practices. - Provide guidance and mentorship to junior security engineers and analysts, fostering a culture of continuous improvement. Technical Expertise: - Oversee the deployment, configuration, and management of Rapid7 Insight VM and Qualys to conduct regular vulnerability scans across the organization's IT infrastructure. - Perform in-depth vulnerability assessments and analysis to identify security weaknesses and potential threats. - Prioritize vulnerabilities based on risk factors, such as exploitability, potential impact, and exposure, and ensure timely remediation. - Work with IT and application development teams to ensure vulnerabilities are remediated within agreed-upon timeframes. - Stay current on the latest vulnerabilities, exploits, and industry trends to ensure the organization’s defences remain robust and up to date. Incident Response and Reporting: - Lead the incident response efforts for vulnerabilities that are actively exploited or present significant risk to the organization. - Create detailed vulnerability reports and executive summaries, communicating findings, risks, and remediation strategies to stakeholders, including non-technical audiences. - Develop and maintain vulnerability dashboards to provide visibility into the organization's risk posture and remediation efforts. Collaboration and Communication: - Collaborate with cross-functional teams, including IT, DevOps, and application development, to integrate vulnerability management practices into the software development lifecycle (SDLC) and IT operations. - Facilitate vulnerability management meetings with key stakeholders to discuss risks, remediation progress, and areas for improvement. - Deliver presentations and training sessions to raise awareness of vulnerability management and its importance across the organization. Continuous Improvement: - Continuously evaluate and enhance the vulnerability management process to improve efficiency and effectiveness. - Identify opportunities to automate routine vulnerability management tasks, including scanning, reporting, and remediation tracking. - Conduct regular reviews of the vulnerability management program to ensure it aligns with the organization's security objectives and regulatory requirements. Qualifications: Education: - Bachelor’s degree in computer science, Information Security, or a related field. A master’s degree is a plus. Experience: - 5+ years of experience in in