vulnerability management specialist

cFocus Software Incorporated

<div><h1 class="jobSectionHeader"><b>Vulnerability Analyst II &ndash; Job Description</b></h1><b>
Position Title: </b>Vulnerability Analyst II<br>
<b>Program: </b>SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader"><b>
Position Summary</b></h2>
The Vulnerability Analyst II provides cybersecurity risk, vulnerability management, and compliance support services in alignment with the SBA Enterprise Cybersecurity Services (ECS) RFQ Task Area 3.5.2. The position supports the SBA Risk Management Framework (RMF), FISMA compliance initiatives, Information System Continuous Monitoring (ISCM), vulnerability management, controls assessment activities, audit support, and continuous monitoring operations across enterprise systems and cloud environments. The analyst performs vulnerability assessments, supports POA&amp;M development, validates security controls, coordinates remediation efforts, and assists Information System Security Officers (ISSOs) and system owners with maintaining compliant and secure systems.<h2 class="jobSectionHeader"><b>
Essential Duties and Responsibilities</b></h2><ul><li>
Perform enterprise vulnerability assessments and compliance scans using SBA-approved tools such as Tenable Security Center (SC), Nessus, and Microsoft TVM.</li><li>
Review identified vulnerabilities, assess impact and risk, and provide remediation recommendations for operating systems, applications, network devices, and cloud environments.</li><li>
Support continuous monitoring and Risk Management Framework (RMF) activities in accordance with NIST SP 800-37, NIST SP 800-53 Rev. 5, and NIST SP 800-53A.</li><li>
Assist with the creation, maintenance, and review of cybersecurity documentation including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&amp;Ms), Configuration Management Plans (CMPs), and contingency documentation.</li><li>
Support control assessments and validation activities by documenting NIST 800-53A Determine If Statements (DISs) and mapping vulnerabilities to applicable controls.</li><li>
Conduct vulnerability scanning activities every 72 hours across workstations, servers, routers, switches, and cloud-based assets in accordance with SBA requirements.</li><li>
Monitor CISA Known Exploited Vulnerabilities (KEV) listings and Binding Operational Directives (BODs) to identify and report emerging risks.</li><li>
Track zero-day vulnerabilities, coordinate remediation activities, and provide ad hoc reporting to leadership and stakeholders.</li><li>
Generate weekly vulnerability reports, dashboards, and briefing materials for ISSOs, system owners, and management.</li><li>
Assist with audit preparation and support activities involving IG, GAO, internal auditors, and external assessors.</li><li>
Maintain scanning infrastructure including scanner deployment, configuration, plugin updates, scan repositories, and vulnerability management SOPs.</li><li>
Support FedRAMP Continuous Monitoring (CONMON) activities by reviewing vulnerability reports and assessing vendor remediation activities.</li><li>
Participate in change management, security operations meetings, and enterprise cybersecurity coordination activities.</li><li>
Ensure all deliverables are complete, accurate, aligned with agency templates, and delivered within required timeframes.</li></ul><h2 class="jobSectionHeader"><b>
Minimum Qualifications</b></h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, Information Assurance, or related discipline. Additional years of experience may substitute for degree requirements.</li><li>
3&ndash;6 years of experience supporting vulnerability management, cybersecurity compliance, RMF, or information assurance activities in a federal environment.</li><li>
Experience performing vulnerability assessments and remediation activities using Tenable SC/Nessus or equivalent tools.</li><li>
Knowledge of FISMA, NIST RMF, NIST SP 800-53 Rev. 5, NIST SP 800-53A, NIST SP 800-137, and related federal cybersecurity standards.</li><li>
Experience supporting POA&amp;M management, security assessments, continuous monitoring, and audit response activities.</li><li>
Working knowledge of Windows, Linux/Unix, network infrastructure, cloud platforms, and enterprise security technologies.</li><li>
Strong written and verbal communication skills with the ability to produce technical documentation and executive-level reports.</li><li>
Ability to analyze security findings, prioritize risks, and coordinate remediation with technical stakeholders.</li></ul><h2 class="jobSectionHeader"><b>
Preferred Certifications</b></h2><ul><li>
CompTIA Security+</li><li>
Certified Information Systems Security Professional (CISSP)</li><li>
Certified Ethical Hacker (CEH)</li><li>
GIAC Security Certifications (GSEC, GPEN, or similar)</li><li>
Tenable Certified Professional or equivalent vulnerability management certification</li></ul><p>
</p><p>Gupkg0JOaj</p></div>

SBA - Vulnerability Analyst II

Fifth Third Bank

<div><p><b>Make banking a Fifth Third better&reg;
</b><br>
We connect great people to great opportunities. Are you ready to take the next step? Discover a career in banking at Fifth Third Bank.
</p><p></p><p>The Lead Information Security Engineer on the Enterprise Vulnerability Management (EVM) Remediation team will support the continuous vulnerability remediation process and reduce the Fifth Third Bank&rsquo;s attack surface across infrastructure, endpoints, and applications on prem and in cloud environments.
</p><p></p><p>The ideal candidate excels at deep investigative analysis into complex problems to identify risks and gaps before they can be exploited. They bring strong expertise across the full Vulnerability Management Lifecycle, including asset discovery, internal and external scanning, contextual and risk-based analysis, CVE triage, reporting, and remediation.
</p><p></p><p>The position requires a solid foundation in security, with demonstrated broad prior experience in foundational roles such as help desk, system administration, networking, SOC operations, &amp; software engineering.
</p><p></p><p>The successful candidate will play a key role in maintaining a strong security posture through close collaboration with infrastructure, development, product, and other teams across Fifth Third Bank to embed security from design through deployment and into ongoing operations.
</p><p></p><p><b>ESSENTIAL DUTIES AND RESPONSIBILITIES:
</b></p><p></p><p><b>Vulnerability Mgt &ndash; Remediation &ndash; 60%
</b></p><ul><li>Serve as the primary escalation point and subject matter expert for the most complex and high‑risk remediation issues across infrastructure, cloud, containers, applications, and code.
</li><li>Provide advanced technical guidance on remediation paths, exploitability assessment, scanning output interpretation, and multi‑layered False Positive evaluations.
</li><li>Stay up to date on the latest vulnerabilities, exploitation techniques, and exploits.
</li><li>Independently own intake, investigation, escalation, and mitigation reviews for high-impact items such as critical vulnerabilities, emerging threats, and executive escalations.
</li><li>Drive and own sophisticated remediation planning that includes dependency mapping, coordinated timelines, and long-term fixes.
</li><li>Perform analytical reviews of large datasets to identify meaningful trends and shape targeted remediation campaigns for the highest areas of risk.
</li><li>Conduct proactive follow-up on stalled plans and escalate appropriately when remediation does not progress.
</li><li>Deliver expert-level communication to technical and non-technical stakeholders to ensure clarity of risk, urgency, and remediation requirements.
</li><li>Oversee False Positive determinations, Exception requests, and Risk Acceptance submissions to ensure accuracy, thoroughness, and adherence to governance standards.
</li><li>Partner with teams across Information Security and application teams across the Bank to ensure complex issues are addressed correctly and efficiently.
</li></ul><p></p><p><b>Metrics, Reporting &amp; Dashboards &ndash; 25%
</b></p><ul><li>Report and track vulnerability metrics, KPIs, and KRIs with proactive escalations to maintain risk within acceptable appetite.
</li><li>Create impactful presentations to deliver key metrics and data to senior leadership.
</li><li>Conceptualize, design, and update dashboards and workflows utilizing scripting, Power Automate, PowerBI, ServiceNOW, Brinqa, and/or other tools/processes as appropriate.
</li><li>Utilize macros, scripting, formulas, and optimizations for workflows in Excel.
</li></ul><p></p><p><b>Process Improvement &amp; Documentation &ndash; 15%
</b></p><ul><li>Work within Agile framework to deliver incremental value.
</li><li>Proactively identify opportunities for, and volunteer to, improve EVM processes and demonstrate measurable impact towards reducing inefficiencies.
</li><li>Build and maintain standards, playbooks, and repeatable processes to improve the efficiency and maturity of the vulnerability management program
</li><li>Mentor junior and mid‑level engineers through hands-on support, structured coaching, and direct involvement in complex cases.
</li><li>Contribute to the evolution of the Program and contribute to additional duties and projects as appropriate.
</li></ul><p></p><p><b>MINIMUM KNOWLEDGE, SKILLS AND ABILITIES REQUIRED:
</b></p><ul><li>At least 6 years of related and recent hands-on experience in Vulnerability Management, IS Engineering or similar Information Security domains.
</li><li>Strong attention to detail, and advanced understanding of security architecture, networking, operating systems, identity, and cloud services.
 </li><li>Demonstrated experience in risk articulation, and remediation strategies across common technology stacks.
</li><li>Experience with threat intelligence inputs and applying exploitability context to remediation prioritization.
</li><li>Demonstrated experience triaging and prioritizing complex findings from scanning tools and translating technical findings into actionable remediation guidance
</li><li>Strong written and verbal communication skills, including the ability to communicate effectively with senior leaders and with deeply technical teams.
</li><li>Proven analytical and problem-solving skills, including the ability to interpret large datasets and identify meaningful trends.
</li><li>Experience collaborating across multiple teams and influencing outcomes without direct authority.
</li><li>Bachelor&rsquo;s degree in computer science/information systems or equivalent combination of education and experience.
</li><li>Certifications such as Security+, CISSP, CISM, GIAC, or cloud certifications (AWS preferred).
</li></ul><p></p><p><b>PREFERRED KNOWLEDGE, SKILLS AND ABILITIES:
</b></p><ul><li>Experience supporting at least one of the following: cloud security, container security, application security, or code scanning programs.
</li><li>Experience building in, and maintaining enterprise workflow and reporting platforms such as ServiceNow, Brinqa, Power BI, and Power Automate.
</li><li>Working knowledge of scripting (for example Python, PowerShell, SQL) to support data analysis and workflow automation.
</li><li>Demonstrated experience in sysadmin, networking, or SOC roles.
</li><li>Experience embedding security controls into CI/CD pipelines and DevSecOps workflows.
</li><li>Hands-on experience implementing cybersecurity frameworks such as NIST CSF, NIST 800-53, CIS Controls, ISO 27001, and PCI DSS, including practical work aligning controls, assessing gaps, and guiding teams through remediation and compliance activities.
</li></ul><p>#LI-CB2
</p><p></p><p><i>Please note that this position is not available for immigration sponsorship.
</i></p><p></p>Lead Information Security Engineer - Vulnerability Management
<p></p>Total Base Pay Range 82,100.00 - 172,500.00 USD Annual
<p></p><p>At Fifth Third, we understand the importance of recognizing our employees for the role they play in improving the lives of our customers, communities and each other. Our Total Rewards include comprehensive benefits and differentiated compensation offerings to give each employee the opportunity to be their best every day.
</p><p></p><p>The base salary for this position is reflective of the range of salary levels for all roles within this pay grade across the U.S. Individual salaries within this range will vary based on factors such as role, relevant skillset, relevant experience, education and geographic location. In addition to the base salary, this role is eligible to participate in an incentive compensation plan, with any such payment based upon company, line of business and/or individual performance.
</p><p></p><p>Our extensive benefits programs are designed to support the individual needs of our employees and their families, encompassing physical, financial, emotional and social well-being. You can learn more about those programs on our 53.com Careers page at: https://www.53.com/content/fifth-third/en/careers/benefits.html or by consulting with your talent acquisition partner.
</p><p></p>LOCATION - Virtual, Ohio 00000
<p></p><p>Attention search firms and staffing agencies: do not submit unsolicited resumes for this posting. Fifth Third does not accept resumes from any agency that does not have an active agreement with Fifth Third. Any unsolicited resumes &ndash; no matter how they are submitted &ndash; will be considered the property of Fifth Third and Fifth Third will not be responsible for any associated fee.
</p><p></p><p>Fifth Third Bank, National Association is proud to have an engaged and inclusive culture and to promote and ensure equal employment opportunity in all employment decisions regardless of race, color, gender, national origin, religion, age, disability, sexual orientation, gender identity, military status, veteran status or any other legally protected status.</p></div><p></p>

Lead Information Security Engineer - Vulnerability Management

geidea

<div>
 <p>
  Established in 2008, Geidea epitomises customer focused empowerment and commercial success through continuous innovation
 </p>
 <p>
  Geidea makes best in class digital payment solutions available for all by attracting and leveraging the best creative &amp; entrepreneurial talent in the market Our solutions give any business the chance to get ahead and reach for more no matter their size or maturity. Our technology mirrors our people - Smart, Innovative &amp; Forward Thinkiking
 </p>
 <p>
  To maintain competitive advantage as we grow, we are currently looking for a new "
  <strong>
   Cybersecurity Defense Expert"
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Job purpose:
  </strong>
 </p>
 <p>
  The purpose of this role is to lead the defense against cyber threats through proactive SOC Monitoring, DFIR, Threat Intelligence, and Vulnerability Management, ensuring the integrity, confidentiality, and availability of information systems in all regions.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key accountabilities and decision ownership:
  </strong>
 </p>
 <ul>
  <li>
   Lead and enhance SOC operations, focusing on real-time threat detection, incident response, and continuous monitoring.
  </li>
  <li>
   Coordinate digital forensics and incident response efforts to mitigate threats efficiently and reduce recovery time.
  </li>
  <li>
   Develop and implement a threat intelligence program to identify and counteract evolving cyber threat
  </li>
  <li>
   Manage the Vulnerability Management Program, including regular assessments, risk prioritization, and remediation strategies.
  </li>
  <li>
   Support the cybersecurity vision and strategy in alignment with defense operations and organizational goals.
  </li>
  <li>
   Oversee information security audits, whether by performed by organization or third-party personnel.
  </li>
  <li>
   Lead integration of standard and non-standard logs in SIEM.
  </li>
  <li>
   Create reports, dashboards, metrics for SOC operations and presentation to Senior Management.
  </li>
  <li>
   Lead team &amp; vendor management overall use of resources and initiation of corrective action where required for Security Operations Center.
  </li>
  <li>
   Develop and maintain enterprise Threat &amp; Vulnerability Management framework and necessary program operational capabilities that include identify, risk assess, and monitor of vulnerability and associated remediation.
  </li>
  <li>
   Maintain control effectiveness and continuously identify gaps in detection controls across the environment, including Geidea&rsquo;s cloud environments.
  </li>
  <li>
   Serve as the process owner of all ongoing activities related to the confidentiality, integrity and availability of information and resources of customers, business partners, employees, and business information, in compliance with the organization's Cyber and Information security policies.
  </li>
  <li>
   Evaluate team performance and build on people capabilities.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Must have technical / professional qualifications:
  </strong>
 </p>
 <ul>
  <li>
   2-3 years of experience
  </li>
  <li>
   Bachelor&rsquo;s degree in computer science, Information Technology, Telecommunications, Electronics &amp; Electrical or any related field.
  </li>
  <li>
   Certifications:
  </li>
  <li>
   GCIH
  </li>
  <li>
   GCFA
  </li>
  <li>
   Experience in cybersecurity architecture design.
  </li>
  <li>
   Experience in NESA IAR, SAMA CSF, PCI-DSS, NCA is a must.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  Our values guide how we think and act - They describe what we care about the most.
 </p>
 <p>
  <strong>
   Customer first
  </strong>
  - It&rsquo;s embedded in our design thinking and customer service approach.
 </p>
 <p>
  <strong>
   Open
  </strong>
  - Openness allows us to constantly improve and evolve.
 </p>
 <p>
  <strong>
   Real
  </strong>
  - No jargon and no excuses!
 </p>
 <p>
  <strong>
   Bold
  </strong>
  - Constantly challenging ourselves and our way of thinking.
 </p>
 <p>
  <strong>
   Resilient
  </strong>
  &ndash; If we fail, we bounce back stronger than before.
 </p>
 <p>
  <strong>
   Collaborative
  </strong>
  - We know that we can achieve a lot more as a team.
 </p>
 <p>
  We are changing lives by constantly striving for a better solution.
 </p>
 <p>
  Click apply below and become part of the Geidea story
 </p>
</div>


Cybersecurity Defense Expert

Santander Consumer Bank

<div><div><div><h1 class="jobSectionHeader"><b>Associate, Information Security</b></h1>
<p>New York, New York</p><p></p><div><div>
</div></div><div><div><div>Job ID</div>
<div>Req1563874</div>
</div><div><div>Category</div>
<div>Technology Risk &amp; Cybersecurity</div>
</div><div><div>Date posted</div>
<div>04/11/2026</div>
</div></div></div><div><div><b>It Starts Here:</b><p></p><p>
Santander is a global leader and innovator in the financial services industry and is evolving from a high-impact brand into a technology-driven organization. Our people are at the heart of this journey and together, we are driving a customer-centric transformation that values bold thinking, innovation, and the courage to challenge what&rsquo;s possible. This is more than a strategic shift. It&rsquo;s a chance for driven professionals to grow, learn, and make a real difference.</p><p></p><p>
If you are interested in exploring the possibilities <b>We Want to Talk to You!</b></p><p></p><p><b>
The Difference You Make:</b></p><p>
Santander is seeking an Associate, Information Security professional to join the Information Security team within the First Line of Defense. This role is primarily focused on <b>Vulnerability Management</b>, with exposure to <b>Network Security</b> as a secondary or &ldquo;nice to have&rdquo; capability. The ideal candidate is a cybersecurity professional who can support, monitor, and help maintain information security controls across on-premises and cloud environments.</p><p></p><p>
As an Associate, you will:</p><ul><li>
Protect the Company, customers, and employees by identifying and mitigating technology threats to Santander</li><li>
Support and strengthen Santander&rsquo;s vulnerability management program through scanning, analysis, prioritization, and remediation tracking</li><li>
Help identify security risks, configuration gaps, and control weaknesses across infrastructure, applications, and cloud services</li><li>
Partner with technology and business teams to drive timely remediation and improve security posture</li><li>
Gain exposure to regulatory expectations and enterprise security operations</li><li>
Build a strong foundation in cyber risk management, with optional growth into network security disciplines.</li></ul><p></p><p><b>
What You Bring:</b></p><p>
The role will report directly to the Director of Information Security and functionally to the Santander US Tower Head of Infrastructure Security Services. The Associate Information Security professional will <b>work closely with multiple technology, application, and business teams</b> across the Santander ecosystem to help <b>advise on secure design and implementation of solutions</b>.</p><p></p><p>
Under the guidance of senior security leaders, this role supports the integration of security controls into new and existing systems while ensuring alignment with Santander&rsquo;s information security policies, standards, and regulatory expectations. The role also supports <b>process improvement and automation initiatives</b>, including the use of scripting and <b>prompt engineering techniques</b> to help streamline repetitive audit, risk, and security-related tasks within the Information Security function.</p><p></p><p><b>
Primary Focus: Vulnerability Management</b></p><ul><li>
Create vulnerability scanning schedules and perform scans on a periodic and ad hoc basis to identify vulnerabilities</li><li>
Conduct vulnerability assessments on IT infrastructure, applications, and related information assets</li><li>
Support the operation and governance of the vulnerability management lifecycle</li><li>
Analyze and prioritize vulnerabilities using the Common Vulnerability Scoring System (CVSS), threat intelligence, exploitability, and business context</li><li>
Identify gaps and risks and drive remediation through closure within established timeframes</li><li>
Partner with infrastructure, application, cloud, and business teams to validate findings and support remediation planning</li><li>
Track remediation progress, escalate aging issues, and support risk acceptance processes when needed</li><li>
Establish, track, and report key vulnerability management metrics (e.g., scan coverage, SLA adherence, critical vulnerability aging)</li><li>
Participate in change request reviews assessing security risk and recommend solutions</li><li>
Perform risk assessments and/or control gap analysis against Information Security Policies and Standards</li></ul><p></p><p><b>
Broader Information Security Responsibilities:</b></p><ul><li>
Collaborate with technology teams to advise on secure implementation of solutions across the Santander environment</li><li>
Provide security input during solution design and change activities, ensuring controls are embedded early in the delivery lifecycle</li><li>
Translate information security requirements into practical, business-aligned guidance for partner teams</li><li>
Support automation of repetitive security and audit-related tasks using scripting tools and prompt engineering techniques</li><li>
Implement book-of-work projects and initiatives within scope, on time, and within budget</li><li>
Establish and maintain appropriate governance forums and escalation paths</li><li>
Manage and monitor technology, audit, and regulatory risk through governance, oversight, reporting, and training initiatives</li><li>
Partner with examiners and auditors on technology examinations, gathering information and responding to findings</li><li>
Bachelor's Degree or equivalent work experience: Computer Science or equivalent field. - Required.</li><li>
5+ Years Experience in information security, governance, IT audit, or risk management. - Required.</li><li>
5+ Years SAS experience. - Required.</li><li>
Understanding of regulatory expectations related to technology and cyber risk (e.g., OCC, FFIEC, DORA, SOX, NYS DFS).</li><li>
Experience with cyber security and information security program management and frameworks (e.g., NIST CSF, ISO/IEC 27000, etc.).</li><li>
Working knowledge of security systems or tools such as Qualys, AlgoSec, Microsoft SCCM, Ansible, Red Hat Satellite, ServiceNow (SNOW), CMDB, etc.</li><li>
Proven ability to work in a team environment.</li><li>
Possess the ability to perform under pressure in a challenging environment.</li><li>
A hunger to learn and take on challenging opportunities, contributing to the success of the information security team.</li><li>
Possess a highly developed sense of personal accountability and follow-through with an ability to effectively prioritize multiple tasks and projects.</li><li>
Must take ownership, demonstrate a sense of urgency, and ensure accuracy and quality.</li></ul><p></p><p><b>
Certifications:</b></p><ul><li>
CompTIA Security+, CompTIA Network+, CISSP</li></ul><p></p><p><b>
It Would Be Nice For You To Have:</b></p><p>
Experience in the following areas is considered a plus:</p><ul><li>
Support oversight of Network Security controls, including firewalls, proxy, Intrusion Prevention Systems (IPS), VPN, Web Application Firewall (WAF), and Network Access Control (NAC), across on-premises and cloud environments</li><li>
Conduct periodic reviews of firewall, proxy, and VPN configurations in accordance with Santander US standards and processes</li><li>
Review firewall configurations to ensure inbound and outbound traffic is limited to what is necessary for business purposes, and that all other traffic is explicitly denied and logged</li><li>
Familiarity with network segmentation, access control principles, and secure rule lifecycle management</li></ul><p></p><p><b>
What Else You Need To Know:</b></p><p>
The base pay range for this position is posted below and represents the annualized salary range. For hourly positions (non-exempt), the annual range is based on a 40-hour work week. The exact compensation may vary based on skills, experience, training, licensure and certifications and location.</p><p></p><p><b>
Base Pay Range:</b></p><p>
Minimum:</p>
$125,000.00 USD<div><div><div><div><div><div><div><p>
Maximum:</p></div></div></div></div></div></div></div>
$165,000.00 USD<p></p><p><b>
We Value Your Impact:</b></p><p>
Your contribution matters and it&rsquo;s recognized. You can expect a fair and competitive rewards package that reflects the impact you create and the value you deliver. We know rewards go beyond numbers. Offering more than just a paycheck our benefits are designed to support you, your family and your well-being, now and into the future. Santander Benefits - 2026 Santander OnGoing/NH eGuide (foleon.com)</p><p></p><p><b>
Risk Culture:</b></p><p>
We embrace a strong risk culture and all of our professionals at all levels are expected to take a proactive and responsible approach toward risk management.</p><p></p><p><b>
EEO Statement:</b></p><p>
At Santander, we value and respect differences in our workforce. We actively encourage everyone to. Santander is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, genetics, disability, age, veteran status or any other characteristic protected by law.<br>
<br>
<b>Working Conditions:</b></p><p>
Frequent minimal physical effort such as sitting, standing and walking is required for this role. Depending on location, occasional moving and lifting light equipment and/or furniture may be required.<br>
<br>
<b>Employer Rights:</b></p><p>
This job description does not list all of the job duties of the job. You may be asked by your supervisors or managers to perform other duties. You may be evaluated in part based upon your performance of the tasks listed in this job description. The employer has the right to revise this job description at any time. This job description is not a contract for employment and either you or the employer may terminate your employment at any time for any reason.</p><p></p><p><b>
What</b><b> To Do Next</b><b>:</b></p><p>
If this sounds like a role you are interested in, then please.</p><p></p><p>
We are committed to providing an inclusive and accessible application process for all candidates. If you require any assistance or accommodation due to a disability or any other reason, please contact us at TAOps@santander.us to discuss your needs.</p></div></div></div></div><p></p>

Associate, Information Security

Gainwell Technologies LLC

<div><p>Be part of a team that unleashes the power of leading-edge technologies to help improve the health and well-being of those most vulnerable in our country and communities. Working at Gainwell carries its rewards. You&rsquo;ll have an incredible opportunity to grow your career in a company that values work flexibility, learning, and career development. You&rsquo;ll add to your technical credentials and certifications while enjoying a generous, flexible vacation policy and educational assistance. We also have comprehensive leadership and technical development academies to help build your skills and capabilities.</p><p></p><div><div><div><h2 class="jobSectionHeader"><b><br>
Summary</b></h2></div><div><p>
Conduct scans (agent/network), analyze results (CVEs, CVSS), identify systemic issues, and perform risk assessments for complex environments (cloud, mobile, DB, OS). Define VM policies, improve posture, guide remediation, lead risk reduction initiatives, and serve as the subject matter expert for complex security vulnerability challenges. Drive remediation at scale across cloud, containers, endpoints, apps, and third parties. Navigates the enterprise for false positives and compensating controls.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Your role in our mission</b></h2></div><div><ul><li>
Develops reports, dashboards, and alerts to automate tasks (Python, PowerShell), and track metrics.</li><li>
Works with IT Operations, SOC, GRC, Third-Party vendors and leadership to align vulnerability management with broader security, manage compliance, and brief leadership.</li><li>
Monitor threat landscape, analyze new vulnerabilities (NVD, MITRE), and provide proactive guidance.</li><li>
Identifies security risks, threats and vulnerabilities of networks, systems, applications and new technology initiatives. Develops, tests and operates firewalls, intrusion detection systems, enterprise anti-virus systems and software deployment tools.</li><li>
Provides complex engineering analysis and support for firewalls, routers, networks and operating systems. Performs and evaluates vulnerability scans within a multi-platform, large enterprise environment. Reacts to and initiates corrective action regarding security violations, attempts to gain unauthorized access, virus infections that may affect the network or other event affecting security.</li><li>
Oversees user access process to ensure operational integrity of the system. Enforces the information security configuration and maintains system for issuing, protecting, changing and revoking passwords.</li><li>
Develops technical and programmatic assessments, evaluates engineering and integration initiatives and provides technical support to assess security policies, standards and guidelines. Develops, implements, enforces and communicates security policies and/or plans for data, software applications, hardware and telecommunications.</li><li>
Performs complex product evaluations, recommends and implements products/services for network security. Validates and tests complex security architecture and design solutions to produce detailed engineering specifications with recommended vendor technologies.</li><li>
Reviews, recommends and oversees the installation, modification or replacement of hardware or software components and any configuration change(s) that affects security.</li><li>
Provides complex technical oversight and enforcement of security directives, orders, standards, plans and procedures at server sites. Ensures system support personnel receive/maintain security awareness and training.</li><li>
Assesses the impact on the business unit/customer caused by theft, destruction, alteration or denial of access to information and reports to senior management.</li><li>
Provides leadership and work guidance to less experienced personnel.</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
What we're looking for</b></h2></div><div><ul><li>
Experience working with vulnerability management/infosec (or equivalent experience).</li><li>
Expert Knowledge with scanners (Tenable, Qualys, Rapid7).</li><li>
Proficiency with authenticated scanning, agent vs network scanning, discovery, segmentation constraints.</li><li>
Proficiency with CSPM.</li><li>
Knowledge of OS (Win/Linux/macOS), cloud security, databases, and networking.</li><li>
Proficiency with CVE, CVSS, MITRE ATT&amp;CK, FISMA, CISA directives.</li><li>
Strong risk analysis, root cause identification, and data analysis.</li><li>
Excellent communication, leadership, and ability to explain complex risks to diverse audiences.</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
What you should expect in this role</b></h2></div><div><ul><li>
Remote position (US only)</li><li>
Opportunities to travel through your work (0-10%)</li><li>
Video cameras must be used during all interviews, as well as during the initial week of orientation</li><li>
The deadline to submit applications for this posting is 5/30/2026</li></ul></div></div></div><p></p><p><br>
The pay range for this position is $95,100 - $135,800 per year, however, the base pay offered may vary depending on geographic region, internal equity, job-related knowledge, skills, and experience among other factors. Put your passion to work at Gainwell. You&rsquo;ll have the opportunity to grow your career in a company that values work flexibility, learning, and career development. All salaried, full-time candidates are eligible for our generous, flexible vacation policy, a 401(k) employer match, comprehensive health benefits, and educational assistance. We also have a variety of leadership and technical development academies to help build your skills and capabilities.</p><p></p><p><br>
We believe nothing is impossible when you bring together people who care deeply about making healthcare work better for everyone. Build your career with Gainwell, an industry leader. You&rsquo;ll be joining a company where collaboration, innovation, and inclusion fuel our growth. Learn more about Gainwell at our company website and visit our Careers site for all available job role openings.</p><p></p><p><i><br>
Gainwell Technologies </i><i>is an Equal Opportunity Employer, where all qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical condition), age, sexual orientation, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.</i></p></div>

Experienced, Information Security Engineer

DOHA BANK Q.P.S.C.

<p><b>Doha Bank Q.P.S.C</b> is one of the largest private commercial banks in Qatar. Established in 1979. Offers retail, corporate, international, treasury, and investment banking services</p><p>The <b>IT Infrastructure Security Specialist</b> at <b>Doha Bank</b> is responsible for protecting the bank&rsquo;s IT infrastructure, networks, endpoints, and systems against cyber threats.</p><p><b>Key Responsibilities:</b></p><p>1. Infrastructure Security Management</p><p>Maintain secure architecture for enterprise IT systems</p><p>2. Threat Monitoring &amp; Incident Response</p><p>3. Vulnerability &amp; Risk Management</p><p>4. Compliance &amp; Regulatory Security</p><p>5. Security Tools &amp; Technology Operations</p><p>6. Collaboration &amp; Projects</p><p><b>Required Skills &amp; Qualifications:</b></p><p>Bachelor&rsquo;s degree in Computer Science / IT / Cybersecurity / Engineering</p><p>7&ndash;10+ years experience in IT security or infrastructure security</p><p><i><b>Strong knowledge of:</b></i></p><p>Network security</p><p>Firewalls, IDS/IPS</p><p>Endpoint security</p><p>Cloud security basics</p><p>Experience in banking or financial services (preferred)</p><p>Certifications (any 2&ndash;3 preferred):</p><p>CCNA / CCNP Security</p><p>CEH</p><p>CISSP / CISM</p><p>Security+ / CISA</p><p>Job Type: Full-time</p><p>Pay: From QAR18,000.00 per month</p><p>Work Location: In person</p>

IT Infrastructure Security Specialist (Doha Bank Q.P.S.C)

OneMain Financial

<div><p>The Threat &amp; Vulnerability Team Manager will be leading critical support for the Information Security&rsquo;s vulnerability management program (VM) for both the on-prem &amp; cloud environments managed by One Main Financial (OMF). They will help create a robust proactive approach for preventing unauthorized access, changes, or exploitation of vulnerabilities through mitigation, active defenses, and automated responses. The VM team&rsquo;s portfolio of activities includes providing vulnerability detection and remediation oversight, vulnerability research, secure baseline compliance, web application security, host-based security, network security, and acting as security subject matter experts for all the organization.</p><p></p><p><b>
Required TVM Technical Competencies</b></p><ul><li>
Extensive knowledge and hands-on experience with a variety of Vulnerability Management Tools such as Tenable, DB Protect, Netsparker, Qualys, etc.</li><li>
Expert knowledge of the Vulnerability Management lifecycle</li><li>
Proven track record of designing, implementing, and managing a successful Threat &amp; Vulnerability Management Program</li><li>
Strong knowledge of networking, operating systems, databases, and web applications</li><li>
Strong knowledge of cybersecurity operations (Cyber Threat Intelligence, Penetration testing, &amp; Incident Response)</li><li>
Deep knowledge and experience of performing both manual and automated asset discovery and enumeration</li><li>
Deep knowledge and experience of systematic and data-driven asset prioritization</li><li>
Expert knowledge and successful application of risk management frameworks</li><li>
Required TVM Management Competencies</li><li>
Track record of leading enterprise-level vulnerability management teams with a history of increasing responsibility</li><li>
Expert project management skills</li><li>
Ability to explain vulnerability management concepts to a wide range of audiences verbally and in writing</li><li>
Expertise in developing and improving vulnerability management operations and processes</li><li>
Strong interpersonal skills and the ability to collaborate with a variety of stakeholders to ensure vulnerability management compliance</li><li>
Expert problem solving and critical thinking skills</li><li>
Proactive disposition and ability to execute on leadership vision with minimal oversight</li></ul><p></p><p><b>
Additional Responsibilities</b></p><p></p><ul><li>
Perform Project/Team Management activities, including assigning tasks, 1-1 coaching, upskilling junior team members, performance evaluations, etc.</li><li>
Lead the redesign, build and day-to-day operations of the vulnerability management (VM) team to include standardization of processes and managing customer expectations.</li><li>
Effectively manage a team of vulnerability management professionals who are focused on proactively preventing the exploitation of IT vulnerabilities that exist across the OMF environments.</li><li>
Successfully assign and complete VM projects, tasks, and\or initiatives on time and to vulnerability management standards.</li><li>
Track all team projects, tasks, and/or initiatives in a centralized location (e.g., Microsoft Lists, Jira, etc.) and provide a reportable schedule.</li><li>
Drive actionable metrics which help ensure the team reduce the time and resources needed to detect, investigate, analyze and remediate vulnerabilities.</li><li>
Manage performance of risk‐based assessments of current and emerging information security issues to support the mission by prioritizing remediation efforts.</li><li>
Proactively delegate support of regular vulnerability, compliance/configuration, database, and web application scanning.</li><li>
Apply effective problem solving and critical thinking skills to evaluate applicable solutions, conduct pilot/evaluations for proof of concepts and ultimately implement better mitigating controls.</li><li>
Research current and emerging information security exploits, threats, and vulnerabilities and disseminate contextual information to appropriate stakeholders.</li><li>
Facilitate exception handling, waiver processing and escalations as needed.</li><li>
Maintain regular communication with security leaderships on process optimization, tools tuning and resetting of VM priorities as business needs prudently recommend.</li></ul><p></p><p><b>
Minimum Qualifications</b></p><p></p><ul><li>
Bachelor's degree and 8+ years of related work experience; or a graduate degree and approximately 7-8 years of related work experience in the fields of Computer Science, Information Systems, Engineering, Business or related major</li><li>
A minimum of 6+ years of professional work experience in cybersecurity with at least 5 years in Vulnerability Management.</li><li>
3 or more years managing\supervising a team of vulnerability management professionals.</li><li>
Knowledge of general security concepts and methods such as vulnerability assessments, data classification, privacy assessments, incident response, security policy creation, enterprise security strategies, architectures, and governance.</li><li>
Experience in process definition, workflow design and process mapping</li><li>
Excellent interpersonal, written/verbal communication and leadership skills with the ability to make recommendations to all levels of the organization.</li></ul><p></p><p><i>
OneMain Holdings, Inc. is an Equal Employment Opportunity (EEO) employer. Qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship status, color, creed, culture, disability, ethnicity, gender, gender identity or expression, genetic information or history, marital status, military status, national origin, nationality, pregnancy, race, religion, sex, sexual orientation, socioeconomic status, transgender or on any other basis protected by law.</i></p></div>

Associate Director Info Security

Search 10000+ Vulnerability management specialist jobs near you this May. New roles added regularly across leading industries. Apply today.