American Red Cross
Information Security Engineer - Vulnerability Management
🇺🇸North Carolina, United StatesRemote available4 days ago
$95,000 – $110KMid
Job Description:
WHY CHOOSE US?
Joining The American Red Cross is like nothing else – it’s as much something you feel as something you do. You become a vital part of the world’s largest humanitarian network. Joining a team of welcoming individuals who are exceptional, yet unassuming. Diverse, yet uncompromising in unity. You grow your career within a movement that matters, where success is measured in people helped, communities made whole, and individuals equipped to never stop changing lives and situations for the better.
When you choose to be a force for good, you’ll have mentors who empower your growth along a purposeful career path. You align your life’s work with an ongoing mission that’s bigger than all of us. As you care for others, you’re cared for with competitive compensation and benefits. You join a community that respects who you are away from work as much as what you do while at work.
WHAT YOU NEED TO KNOW (Job Overview):
We are actively seeking and experienced Vulnerability Management Analyst to join our Information Security team. In this role, you will be responsible for monitoring and reviewing vulnerability and compliance scan results. Performing detailed research and analysis of scheduled and on demand vulnerability assessments and post results to the system owners. Communicating to the leadership the vulnerability posture of the organization assisting the organization with lowering the overall risk posture for threats to the systems and data. Qualified candidates will have a background in security or systems engineering.
The work location for this position is remote and can be worked from anywhere in the United States with core hours starting by 10am EST for a West coast work location.
This position will also be a part of on call rotation for a week at a time every 2 to 3 months managing tickets/emergencies. Need to have ability to travel to on-site meetings ~2x/year.
WHERE YOUR CAREER IS A FORCE FOR GOOD (Key Responsibilities):
Collaborate with InfoSec engineers to review, assess and provide remediation recommendations regarding discovered vulnerabilities and their potential impact to the organization.
Communicate with system owners the recommended remediation actions providing a comprehensive remediation solution as a collaborative effort to lower the risks to the organization.
Establish communications with the organization for the release of newly identified vulnerabilities.
Conduct research and evaluate technical and cyber threat intelligence to develop in-depth analysis and assessment on threats to vulnerabilities
Track progress of vulnerability remediation with responsible system owners and\or support teams.
Coordination with system owners to ensure remediation efforts are consistent with policy and escalate instances of non-compliance.
Provide organizational vulnerability reporting to leadership with tracking, remediation efforts, etc.
Respond to cyber security incidents
Typically has other unit-specific duties within the scope of the job
Scope: Individual contributor with comprehensive knowledge in specific area. Ability to execute highly complex or specialized projects. Adapt precedent and may make significant departures from traditional approaches to develop solutions.
Note: Qualified candidates must be authorized to work in the United States. The American Red Cross does not sponsor employment visas.
WHAT YOU NEED TO SUCCEED (required/minimum qualifications):
Education: Bachelor's degree in Computer Science, Computer Engineering, or related discipline required.
Experience: Minimum 4 years of related experience or equivalent combination of education and related experience required.
Management Experience: N/A
Technical experience required includes:
Microsoft Windows Server systems hardening, auditing and logging
Linux Operating Systems
Vulnerability Management Programs
Supporting a organization with threat analysis
Demonstrate advanced understanding of the principles of vulnerability assessments
Vulnerability assessment tools (Qualys)
Skills & Abilities required:
Strong verbal and written communications skills with the ability to explain technical issues to non-technical audiences
Strong team player with a willingness to share information and train others; act as a mentor to less seasoned team members
Self-starter, with the ability to work with minimal direct supervision
Highly organized and capable of prioritizing work loads
Experienced in developing and presenting solution recommendations
Participation in on-call rotations is required
Travel: 2x year at minimum
WHAT WILL GIVE YOU THE COMPETITIVE EDGE (Preferred Qualifications):
Project Management skills a plus
A sense of unparalleled passion, energy, and eagerness to contribute to and support the mission of the Red Cross
* Combination of candidate’s education and general experience satisfies requirements so long as the total years equate to description’s minimum education and general experience years combined (Management experience cannot be substituted).
----------------------
Physical Requirements: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. While performing the duties of this Job, the employee is regularly required to sit; use hands to handle or feel; and talk or hear. The employee is frequently required to reach with hands and arms. The employee is occasionally required to stand; walk and stoop, kneel, crouch, or crawl. The employee must frequently lift and/or move up to 15 pounds and occasionally lift and/or move up to 30 pounds. Specific vision abilities required by this job include close vision, distance vision, color vision, peripheral vision, depth perception and ability to adjust focus. The work environment will consist of moderate noise (i.e. business office with computers, phones and printers, light traffic). The employee must have the ability to work in a small cubicle and have the ability to sit at a computer terminal for an extended period of time.
DISCLAIMER: The above statements are intended to describe the general nature and level of work being performed by individuals assigned to this position. They are not intended to be construed as an exhaustive list of responsibilities, duties and skills required of personnel so classified
+++++++++++++++++++++++++++++
PAY INFORMATION:
The annual salary range for this position is $95K - $110K. We do not offer an annual bonus for this role.
Note that American Red Cross salaries are aligned to the specific geographic location in which the work is primarily performed. Other factors that may be used to determine your actual salary may include your specific skills, how many years of experience you have and comparison to other employees already in this role. **We will review specific salary information at the time of phone screening based upon your location & experience.**
This job will be posted for a minimum of five business days and extended if the applicant pool needs to be expanded.
BENEFITS FOR YOU:
As a mission-based organization, we believe our team needs great support to do great work. Our comprehensive package includes:
• Medical, Dental Vision plans
• Health Spending Accounts & Flexible Spending Accounts
• PTO: Starting at 19 days a year; based on type of job and tenure
• Holidays: 11 paid holidays comprised of six core holidays and five floating holidays
• 401K with up to 6% match
• Paid Family Leave
• Employee Assistance
• Disability and Insurance: Short + Long Term
• Service Awards and recognition
*LI-EH1
The American Red Cross is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.
Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers, San Diego Fair Chance Ordinance, the California Fair Chance Act and any other applicable state and local laws.
AmeriCorps, the federal agency that brings people together through service, and its partners — the Peace Corps, AmeriCorps Alums, National Peace Corps Association, and the Service Year Alliance — launched Employers of National Service to connect national service alumni with opportunities in the workforce. American Red Cross is proud to be an EONS partner and share our employment opportunities with the network of organizations.
Interested in Volunteering? Visit redcross.org/volunteertoday to learn more, including our most-needed volunteer positions.
To view the EEOC Summary of Rights, click here: Summary of Rights
