Principal Vulnerability Management Engineer
What a Principal Vulnerability Management Engineer does at HP:
- Oversees the management and monitoring of the organization's security landscape with a focus on prompt issue resolution, in-depth vulnerability and threat analysis, proactive prevention, and extensive security research pertaining to ongoing and potential issues.
- Leads the resolution of security challenges, drawing upon the expertise of relevant security subject matter experts for strategic technical guidance and engaging with internal stakeholders, as needed.
- Defines and establishes the best practices for vulnerability assessment processes and solutions within the security teams.
- Collaborates with stakeholders to develop advanced security dashboards, reports, and alerts while also facilitating advanced IT security/risk training, emphasizing on industry changes and emerging threats.
- Contributes highly innovative ideas and may lead large cross-functional teams, exercising independent judgment to solve unique and complex problems impacting the business.
- Provides mentorship and guidance to lower-level employees, thus ensuring the realization of operational and strategic plans.
Individuals who thrive in this role at HP typically have:
- Four-year or Graduate Degree in Computer Science, Information Technology, or any other related discipline or commensurate work experience or demonstrated competence.
- 10+ years of relevant experience Cybersecurity Vulnerability Management and OS Hardening practices for Windows, Linux, and network equipment.
- In-depth understanding of common operating systems such as Windows and Linux, as well one or more common enterprise technology solutions such as Active Directory, VMWare, common web and web application servers, databases, etc.
- Experience with Amazon Web Services (AWS) and Microsoft Azure Cloud assets a significant plus.
- Strong verbal and written communication skills and comfort presenting information technical and non-technical audiences including Senior HP Leadership.
- A mindset of continuous growth, curiosity, and asking WHY?
Nice to Haves:
- Certified Information Systems Security Professional (CISSP); or
- CompTIA Security+
Data & Information Technology
Full time
No shift premium (United States of America)
-
Please be assured that you will not be subject to any adverse treatment if you choose to disclose the information requested. This information is provided voluntarily. The information obtained will be kept in strict confidence.