ENGINEER, CYBER SECURITY II

Job Summary

GENERAL DESCRIPTION:

The Cyber Security Engineer is an individual contributor role supporting the global program to actively identify and remediate network, system and application vulnerabilities across Qualfon infrastructure. This role is responsible across all the global Qualfon assets, reporting results in a timely manner to relevant Security, Infrastructure and Application groups, advising through remediation.

As part of the Global Information Security organization, this role will need to develop strong relationships within Security and respective IT departments globally to successfully execute and manage the vulnerability assessment activities.

Area of expertise (Skills)

1. Plan and execute Vulnerability Assessments and Penetration Testing across Qualfon global infrastructure
2. Participate in a team environment to actively monitor the Qualfon global infrastructure against real-time cybersecurity attacks and help triage and manage the prospective incidents
3. Deliver timely execution and reporting in line with security standards to relevant teams with clear indications and explanations of in-scope remediation requirements
4. Use manual testing techniques and methods to gain a better understanding of the environment and validate false negatives/ positives
5. Identify gaps and areas of improvement for process and recommendations to fill identified gaps or implement change
6. Promotes and facilitates effective communication among the Information System, Security Engineering, Architecture, IT Operations and other departments or business units.
7. Maintaining effective ad-hoc and periodic Vulnerability Management programs across the in-scope global inventories
8. Working through technical aspects and other contributions within the team.

Other Skills and Experiences (Min)

1. Plan and execute Vulnerability Assessments and Penetration Testing across Qualfon global infrastructure
2. Participate in a team environment to actively monitor the Qualfon global infrastructure against real-time cybersecurity attacks and help triage and manage the prospective incidents
3. Deliver timely execution and reporting in line with security standards to relevant teams with clear indications and explanations of in-scope remediation requirements
4. Use manual testing techniques and methods to gain a better understanding of the environment and validate false negatives/ positives
5. Identify gaps and areas of improvement for process and recommendations to fill identified gaps or implement change
6. Promotes and facilitates effective communication among the Information System, Security Engineering, Architecture, IT Operations and other departments or business units.
7. Maintaining effective ad-hoc and periodic Vulnerability Management programs across the in-scope global inventories
8. Working through technical aspects and other contributions within the team.

Education