Cybersecurity Engineer

• The Chief Security Office (CSO) comprises the Chief Information Security Office (CISO) and the Corporate Security unit.
• The CISO organization guarantees information security for Client.
• To this, we provide the Information Security teams with solutions through implemented different projects to support their operations and automate their processes.
• Furthermore, our team monitors and ensures the compliance of CSO application to Client policies on technical level.
• Cyber Hygiene Engineer: Involved in exciting projects in our company and our worldwide business network.
• Responsible for transition, migration, and implementation of the cloud scanning and vulnerability management solutions.
• This role combines project management and security engineering responsibilities, and it gives great opportunity to use both, technical and soft skills, as well to be part of a dynamic new team.

• Implement and manage scanning and vulnerability management solutions on the Cloud Platforms.
• Configure and fine-tune cloud configuration management (CCM) tools to ensure accurate and secure configurations of cloud resources.
• Develop and maintain cloud security guardrails to prevent misconfigurations and security violations.
• Configure and fine-tune vulnerability scanning tools to ensure accurate and comprehensive assessment of cloud infrastructure and services.
• Develop and maintain integrations between vulnerability management tools and GCP services for seamless vulnerability data collection and analysis.
• Collaborate with cross-functional teams to define and implement security policies and procedures for the cloud environment.
• Perform analysis on large vulnerability data sets across the bank's infrastructure.
• Utilize various data analysis techniques to detect patterns, trends and anomalies related to vulnerability data.
• Design and implement data visualization solutions to effectively communicate findings from data analysis activities.
• Collaborate with cross functional teams including other CSO teams, IT professionals, product owners to understand vulnerability remediation process and highlight any gaps based on vulnerability analysis results.
• Provide guidance and support to development and operations teams on integrating vulnerability management practices into their workflows.
• Stay updated with the latest Cloud security features, vulnerabilities, and best practices, and provide recommendations for improvement.
• Create and maintain documentation related to Cloud scanning and vulnerability management processes, including configuration guides and standard operating procedures.
• Collaborate with development and operations teams to integrate vulnerability management practices into the software development lifecycle.
• Conduct security training and awareness programs for internal teams to foster a culture of security awareness and best practices.

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 3-5 years of relevant experience in vulnerability management, network security, or a related field.
• Strong understanding of cloud computing concepts, including cloud infrastructure, services, and security features.
• Experience with CSPM, CCM, and cloud security guardrails tools.
• Experience with vulnerability assessment and management tools such as Nessus, Qualys, or similar.
• Familiarity with industry-standard vulnerability frameworks and databases such as CVE and CVSS.
• Proficiency in scripting or programming languages (Python, Bash, etc.) for automation and tooling purposes.
• Knowledge of network protocols, firewalls, intrusion detection systems, and other security technologies.
• Understanding of secure coding practices and application security principles.
• Ability to assess and quantify risks based on data analysis findings. Understanding of risk metrics and methodologies
• Proficiency in analyzing large datasets using statistical methods and data visualization techniques to identify patterns related to vulnerabilities
• Excellent analytical and problem-solving skills with the ability to prioritize and manage multiple tasks.
• Strong communication skills, both written and verbal, with the ability to effectively collaborate with cross-functional teams.
• Relevant certifications.

• 401k Retirement Savings Plan administered by Merrill Lynch
• Commuter Check Pretax Commuter Benefits
• Eligibility to purchase Medical, Dental & Vision Insurance through ECLARO

Eclaro