Drive remediation activities by understanding the impact of findings and developing communication channels with key stakeholders.
Engineering, Collaboration & Partnerships
Maintain knowledge of current trends, recent publications, and emerging technologies as they pertain to risk and vulnerability management.
Identify, prioritize, communicate, and mitigate security risks for on-premises and hybrid/multi-cloud environments.
Produce frequent metrics to measure the efficacy and effectiveness of the vulnerability program.
Identify business critical systems and environments including mapping data types in enterprise assets, databases, cloud environments, and applications.
Work with outside vendors and consultants to identify tools to meet or exceed department needs.
Demonstrate good judgment in identifying and solving problems that aligns with team and corporate goals.
Enforce compliance with company policies and standards.
Contribute to the vulnerability management program by driving remediation activities pertaining to application (DAST) scans, security assessments, vulnerability scans, or risk management activities and tools.
Configure and tune security tools to identify weaknesses in systems, applications, databases, and cloud environments.
Performance Improvement
Help the security team to maintain a level of excellence.
Develop and evaluate performance metrics to establish process success.
Design, document, and implement procedures and techniques that are consistent with best practices for analyzing and evaluating the risk (software & business), accuracy, completeness, internal integrity/consistency, testability, and overall quality of the system.
Research emerging technologies and identify opportunities for adoption within vulnerability management and application security.
Track progress for vulnerability management related processes, and constantly look for ways to make things work better, faster, and smoother.
Collaborate on and adhere to security engineering standards, methodologies, and sustainable processes.
Qualifications
Associate’s degree in IT discipline, equivalent work experience, or equivalent IT certifications.
3+ years of experience with vulnerability management, system and application scanning, coordinating remediation efforts, and building partner relationships to achieve programmatic success.
4+ years of experience taking ownership of project, enhancement, or other assignments and seeing the process through to completion.
Experience with all the main cloud vendors (Amazon Web Service, Azure, Google Cloud Platform)
Understanding of applying security controls to operating systems, cloud environments, databases, and applications.
Hands of experience using vulnerability scanning tools and driving remediation at an enterprise level (Qualys, Tanium, Bitsight, etc.).
Experience using Asset Management and Reporting Platforms.
Experience creating weekly metrics for vulnerability and risk reduction reporting.
Professional level security certifications preferred (e.g., Security+, Network+, CISSP, CEH, CISM)
Familiarity with security industry standards (ISO 27001, NIST 800-53 series, etc.) and best practices to implement control frameworks.
Working knowledge of network and/or security technologies
Other requirements as needed.
Please note that this position is not eligible for visa sponsorship, including employer sponsorship for an H-1B visa, OPT-STEM employment, etc.
The base salary compensation range for this role is $105,000 to $135,000. Final compensation for this role will be determined by various factors such as a candidates’ relevant work experience, skills, certifications, and geographic location. Full time positions are eligible for benefits that include participation in a retirement plan, life and disability insurance, health, dental and vision plans, flexible spending accounts, sick leave, vacation time, personal time, parental leave and employee stock purchase plan.
Sinclair is proud to be an equal opportunity employer and a drug free workplace. Employment practices will not be influenced or affected by virtue of an applicant's or employee's race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, disability, genetic information, military or veteran status or any other characteristic protected by law.
About Sinclair
Sinclair, Inc. (Nasdaq: SBGI) is a diversified media company and a leading provider of local news and sports. The Company owns, operates and/or provides services to 177 television stations in 79 markets affiliated with all major broadcast networks; owns Tennis Channel, the premium destination for tennis enthusiasts; and multicast networks CHARGE, Comet, ROAR and The Nest. Sinclair’s AMP Media produces a growing portfolio of digital content and original podcasts. Additional information about Sinclair can be found at www.sbgi.net.
About the Team
The life-blood of our organization is our people. We have a compelling story, a goal-oriented culture, and we take really good care of people. How good? Here is a glimpse: great benefits, open-door policy, upward mobility and a strong desire to see you succeed. Ready to be part of a winning team? Let’s talk.
