FeedbackIf you find a bug, or have feedback, put it here. Please no job applications in here, click Apply on the job instead.Thanks for the message! We will get back to you soon.

[Spam check] What is the name of Elon Musk's company going to Mars?

Send feedback
Open Startup
RSS
API
Health InsurancePost a job

find a remote job
work from anywhere

πŸ‘‰ Hiring for a Remote position?

Post a job
on the πŸ† #1 Remote Jobs board

Remote Health by SafetyWing


Global health insurance for freelancers & remote workers

DrFirst


closed

infosec

 

web dev

 

engineer

This job post is closed and the position is probably filled. Please do not apply.
\nPurpose: \n The Information Security Engineer will be on the Information Security team and focus on handling Web Application Vulnerability Management, Issue Management, and Incident Response. The position objective is to support the operations of the Information Security department. With a primary focus on finding, analyzing, and tracking vulnerabilities and security issues to remediation.\n\nThe successful candidate must have in-depth knowledge of information security, web application vulnerability management, web applications testing, and static code analysis. High level communication skills are essential to successfully translate technology and requirements into business terms.\n \n This role lies within the Information Security function, reporting to the Information Security Manager, but is closely aligned with other corporate functions such as Human Resources, Compliance and Information Technology, and may involve liaison with third party suppliers of awareness and training materials and services.\n\n\n\nKey Responsibilities\n\n\n* Operate and improve the end-to-end vulnerability management process, including aspects of asset inventory, contextual approach to scanning, conducting risk and vulnerability assessment, and providing reporting and remediation guidance.\n\n* Operate Web Application security testing, and Static Code vulnerability analysis\n\n* Provide in-depth analysis of vulnerabilities and related impact to stakeholders.\n\n* Lead regular meetings with stakeholders to coordinate remediation efforts and clarify ownership.\n\n* Influence stakeholders to prioritize risk treatment for identified vulnerabilities.\n\n* Provide security reviews of change management tickets submitted by the organization to ensure remediation efforts are acted upon in a timely manner.\n\n* Serve as the subject matter expert for threat and vulnerability processes.\n\n* Assist with associated incident response, security administration, and security monitoring initiatives as requested.\n\n\n\n\n\nEducation and Skill Set:\n\n\n* Bachelor’s degree in related field\n\n* A minimum of 5 years of experience in IT and information security, 2 of which must be in information security\n\n* Must be a self-motivated, detail-oriented professional\n\n* Excellent communication, facilitation, and writing skills\n\n* Strong knowledge in a scripting language such as perl or python\n\n* Strong knowledge of Java or an equivalent programming language\n\n* Experience using JIRA is preferred but not required\n\n* Experience with security tools, including: vulnerability management tools such as Nessus, or Qualys, Symantec Endpoint Protection, Veracode or IBM Appscan, nmap, metasploit, core impact.\n\n* Expert understanding of operating systems (Windows, Linux, Mac, iOS/Android)\n\n* Experience with, and understanding of, the healthcare industry is preferred\n\n* Demonstrated ability to develop and report on metrics\n\n* Excellent communication, facilitation, and writing skills\n\n* Understanding of networks and network architecture\n\n\n\n\n\n\n


See more jobs at DrFirst

# How do you apply?\n\n This job post is older than 30 days and the position is probably filled. Try applying to jobs posted recently instead.
212ms