Senior Vulnerability Management Engineer
Location: Offsite, London, United Kingdom
Area of Interest: Security
Job Type: Professional
Job Id: 1433327
Who We Are
As the leader in cloud-managed IT, Cisco Meraki connects passionate people to their mission by simplifying the digital workplace. Our impact is driven by the innovative, purposeful, and vibrant people who make up our inclusive community.
About The Team
As a member of the Security Operations team, you will have a substantial impact on the security of millions of Cisco Meraki users all around the world. We are looking for people who are passionate about security and eager to learn the ropes of vulnerability management.
About The Role
The Vulnerability Management Engineer plays a critical role in ensuring the security of our systems by managing and mitigating vulnerabilities. Key responsibilities include:
1. Reviewing vulnerability scanning reports and assessing severity.
2. Triaging vulnerabilities and managing Jira tickets for timely remediation.
3. Utilizing tools such as Qualys, JFrog Xray, and Wiz for vulnerability detection and response.
4. Implementing a risk-based prioritization method for effective management.
5. Leading process optimization efforts by identifying gaps in the vulnerability management workflow.
6. Collaborating with international engineering teams to provide guidance on mitigating vulnerabilities.
7. Investigating vulnerability alerts and assessing their impact.
8. Maintaining scanning tools and reviewing CVEs for potential risk exceptions.
9. Guiding teams on security best practices and patch management standards.
10. Flexibility to work across different time zones for effective global collaboration.
Minimum Qualifications
* 5+ years of vulnerability management experience, triaging and remediating findings from various scanning tools.
* In-depth knowledge of common Security vulnerabilities (OWASP Top 10, CWE Top 25).
* Experience building out and/or maturing vulnerability management programs.
* Exposure to EU compliance programs and Security Frameworks/Standards.
* Demonstrated expertise in network security principles.
* Experience using container orchestration tools such as Docker and Kubernetes.
* Familiarity with risk management concepts.
* Experience writing automation scripts in Python.
* Experience working in an agile environment.
* Consistent track record to ship in a dynamic environment.
* Experience developing in a hybrid environment using AWS or other cloud providers.
* Experience using Jira and other Atlassian software.
At Cisco Meraki, we’re challenging the status quo with the power of diversity, inclusion, and collaboration. We’re building an employee experience that includes appreciation, belonging, growth, and purpose for everyone.
Cisco is an Affirmative Action and Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to any legally protected basis.
#J-18808-Ljbffr