Threat Governance - Engineer I

The Opportunity

This role will be working on Cloud security issues and the Vulnerability issues on FICO assets which includes user computers, data center systems and Cloud. This position will work with key stakeholders to understand threats unique to each business unit or application. This position will collaborate with technology, security, development and product management groups across the corporation to drive successful execution of the Threat governance Portifolio to ensure an appropriate proactive enterprise security posture.

What Youll Contribute

• Collaborate with FICO Cyber Security Team, Business and IT partners, and clients.
• Act as an internal subject matter expert with respect to Vulnerability and Compliance scanning and reporting. Implement new and iterate on existing technology to help identify and mitigate security issues.
• Validate and triage identified vulnerabilities.
• Contribute to team strategy in managing threats and vulnerabilities.
• Develop, evangelize, and iterate on threat & vulnerability management practices.
• Conducting required tasks for the vulnerability scanning program and publishing reported vulnerabilities to impacted teams for remediation.
• Triage and risk rank vulnerabilities according to severity and exposure. Work with Product and IT teams to risk rank and patch vulnerabilities related to the technology stack. Develop remediation plans for vulnerabilities.
• Initiate improvement activity to reduce risk, ensure compliance, lower cost, and improve quality within IT processes.
• Conduct/support periodic risk assessments and develop appropriate mitigation plans in support of deliverables.
• Continuous review of configuration management and vulnerability management posture inside the company and knowledge of all external developments that could bring new risks, including vendor patches, zero-day exploits, end-of-life systems or deprecated services.
• Strong thought process to enhance the current capabilities of Cloud asset management , Cloud vulnerability management & cloud patch management

What Were Seeking

• Bachelors Degree and 3+ years of experience in a related field.
• knowledge of the current threat landscape is a must have.
• Basic knowledge of malware operation, indicators or threats is required
• Demonstrates subject-matter expert level understanding in multiple IT, Security and Software disciplines.
• Ability to understand AWS cloud infrastructure and Cloud security
• Ability to understand the cause and effect of application vulnerabilities with Operating System Vulnerabilities.
• Must be able to multi-task and keep track of large amounts of information across disparate systems.
• Ability to keep making progress and define future strategy/policy with regards to Vulnerability Management.
• Adherent to continuous monitoring and continuous improvement thought process.
• Demonstrated technical security expertise in a variety of cloud platforms (AWS is preferred).
• Ability to effectively translate and present solutions in business or management terms.
• knowledge on any scripting language is nice to have.
• Moderate documentation and analytical skills; documenting processes, policies and standards.
• Moderate ability to provide end to end support to enterprise counterparts, identifying root cause of complex enterprise initiatives.