As a Security Operations Associate in Cybersecurity & Tech Controls, Vulnerabilities Management Team, you will be a key member of the EMEA team, as part of a follow-the-sun global team. You will work directly with Line of Business Application Teams, Subject Matter Experts, Production Management Teams, Product Owners, Senior Technology Management, External Vendors and Risk and Control functions. You’ll be on the front lines of managing vulnerabilities by making critical decisions on the inherent risk to the infrastructure or the application itself and thus the risk to the firm clients & customers. You will be working with a highly-motivated team laser-focused on analyzing, scoping, developing and delivering solutions built to stop adversaries and strengthen our security posture. Your research and work will ensure stability and resiliency of our current technology products, emerging technology and our vast application estate. Working in tandem with various internal teams both in Cyber and various Line of Business partners, as well as technologists and innovators across our global network, by leading the positive actions that will stop adversaries and strengthen customer’s confidence.
Job responsibilities
- Review new vulnerabilities published from multiple sources and identify those that may pose risk to the firm.
- Define an accurate risk rating in line with proprietary and industry standard risk rating methodologies.
- Uses enterprise-authorized AI capabilities within the work environment to accelerate security investigation triage and incident reporting, validating outputs and handling operational data according to sensitivity and security requirements.
- Document impacted assets and/or application(s) providing a detailed write up on the risk and exposure posed by vulnerabilities.
- Assess threat actor intelligence, exploit code, and/or conceptual code to determine attack vectors.
- Recommend any risk mitigation factors and define the remediation activity if known.
- Assess security researcher identified vulnerabilities to provide recommendations on remediation and identify additional risk
- Leverage AI tools to accelerate the triage and assessment of vulnerabilities, as well as improve the process workflow and documentation quality.
- Drive global teams’ daily workflows through case-load analysis and prioritization, while serving as the technical lead and representative on major incidents impacting the Vulnerability Management space.