Security Engineer II

Cyderes (Cyber Defense and Response) is a pure-play, full life-cycle cybersecurity services provider with award-winning managed security services, identity and access management, and professional services designed to manage the cybersecurity risks of enterprise clients.  We specialize in multi-technology, complex environments with the in speed and agility needed to tackle the most advanced cyber threats. We leverage our global scale and decades of experience to accelerate our clients’ cyber outcomes through a full lifecycle of cybersecurity services. We are a global company with operating centers in the United States, Canada, the United Kingdom, and India. About the Role: Cyderes is looking for a dedicated, creative, and experienced security engineer to join our Attack Surface Management and Vulnerability Management team. This candidate should have a deep understanding of security operations, vulnerability management, change management, security awareness, risk reporting, and product ownership. Candidates will need to have a customer-first attitude and be comfortable interacting with a number of different stakeholders both internal to Cyderes and external-facing to customers.  This is a great opportunity for someone who is seeking to solve customers cyber security problems in a great environment with an exceptional team. We have a heavy focus on empowering our employees to make great decisions by collecting rich datasets from customer environments. Critical thinking, passion, and an attitude for growth are essential to the success of this position Responsibilities:

Oversee client vulnerability management using multiple vendor solutions

Work with clients directly on creating and updating relevant documentation to the vulnerability management solution

Lead meetings concerning vulnerability management, talking to a variety of skill levels.

Be the subject matter expert in monthly executive meetings and quarter board report meetings.

Advise clients on possible upcoming issues and vulnerabilities

Keep up with current state of vulnerabilities and exploits

Understand the MITRE Framework and CVE’s

Create technical documentation for vulnerability management processes

Communicate the risks of identified vulnerabilities and recommend security controls to mitigate them.

Participate in weekly vulnerability scrum meetings with various members of the cyderes teams to discuss vulnerabilities and actions

Work directly with vendors on persistent issues and work with the client to guide remediations

Work with numerous Cyderes groups to develop autoremediation features through all of our tools

Prepare weekly/monthly/QBR vulnerability

Stay up to date and relay new vulnerability discoveries and announcements – create/follow action plans in the cases of criticals/zero day/10 scores

Requirements:

3+ years experience addressing vulnerabilities and/exploits in numerous environments including Windows, AWS, Azure, GCP, Linux

Comfortable presenting subject matter expert material with executive level clients

Experience with Tenable, Tanium, Microsoft Vulnerability management for Defender, Rapid7 consoles etc required

An understanding of compliance standards such as PCI, SOC2 etc and be able to relay relevant information and concerns directly to the client

Experience with autoremediation a plus

Knowledge and workplace experience resolving and tracking CVEs and Exploits in multiple environments

Experience with visualization tools like Powerpoint and Visio to present to clients.