Job details
Job type full-time
Full job description
Overview: in this role, you will lead rackspace’s vulnerability management program by developing and driving strategic initiatives to improve the program through expansion of risk exposure capabilities and operational rigour related to vulnerability scanning, segmentation validation, remediation guidance, automation, and integration with it systems and partnership with other teams.
Works autonomously with little to no instruction on daily work and new assignmentsCompletes moderate volume, high complexity tasks
Highly skilled and able to respond to unique and special situations
Understands the value proposition of the role with the organization and adapts strategy and tasking accordingly
Resolves complex issues where analysis of situations requires an in-depth evaluation of multiple factors
Understands what evaluation criteria and resolution methods and techniques will obtain desired outcomes
Technical escalations and project-oriented / business objective-oriented work
Proactively identifies, adapts, improves, automates, and builds new and existing processes, and identifies the need, mechanism, and implementation plan for new processes, driving for operational efficiency
You have:
5+ years in the information security field
Subject matter expert-level knowledge of security concepts and how they relate and apply to the business priorities and products
Strong foundation, or expert-level knowledge, in 3 of the following: system administration, networking, programming, incident response/threat analysis
Creates and coordinates the strategy to improve the program, and to serve as an escalation point for configuring new platforms and technologies for automated vulnerability assessments
Performs and recommends tools and strategies for performing vulnerability assessments on servers, workstations, cloud platforms, and other components
You will:
Interpret and prioritize vulnerability scan results into remediation actions, and is able to create a reporting structure to enable follow-ups with tracking actions through to completion.
Familiar with vulnerabilities, remediation, and industry-standard classification schemes (cve and cvss) and Apply Now data from these to be able to be usable to the business at scale
Summarizes findings into reports in a clear format that is actionable to business stakeholders
Lead, formulate and perform tabletop exercises and guides lessons learned and process or tooling improvements based on findings
Prioritizes missions based on expected value and impact to the organization.
Strong understanding of common programming or scripting languages such as python, bash, powershell, or javascript to support data collection, organization, and analysis and vulnerability assessments
Experience with version control systems such as git, interacting with rest apis, and configuration management tools such as ansible
Familiar with vulnerabilities, remediation, and industry-standard prioritization and classification schemes (cve, cvss, vendor criticality and risk scores)
Postures and contextualizes vulnerability findings and escalates to areas of the business to be addressed as needed
Understands the technical risk to the business that a vulnerability represents, and articulates this risk to key decision-makers
A foundational understanding of the major compliance regulations, such as pci, hipaa, hitrust, or fedramp, with a good understanding of the controls surrounding vulnerability management
Certifications:
At least two advanced security certificationsFor example offensive security certification (oscp, osee, oswe), giac certification (gcih, gwapt, or gpen), or (isc)2 certification (cissp, sscp, ccsp)
About rackspace technology we are the multicloud solutions expertsWe combine our expertise with the world’s leading technologies — across applications, data and security — to deliver end-to-end solutionsWe have a proven record of advising customers based on their business challenges, designing solutions that scale, building and managing those solutions, and optimizing returns into the futureNamed a best place to work, year after year according to fortune, forbes and glassdoor, we attract and develop world-class talentJoin us on our mission to embrace technology, empower customers and deliver the future.
More on rackspace technology though we’re all different, rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring missionWe bring our whole selves to work every dayAnd we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globeWe welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristicIf you have a disability or special need that requires accommodation, please let us know.
Position is available for remote work in the following states unless otherwise specifiedAlabama, arizona, arkansas, california, connecticut, delaware, district of columbia, florida, georgia, idaho, illinois, indiana, iowa, kansas, kentucky, louisiana, maine, maryland, massachusetts, michigan, minnesota, mississippi, missouri, montana, nebraska, nevada, new hampshire, new jersey, new mexico, new york, north carolina, north dakota, ohio, oklahoma, oregon, pennsylvania, rhode island, south carolina, south dakota, tennessee, texas, utah, vermont, virginia, washington, west virginia, wisconsin, wyoming.
