Associate Security Engineer

 Associate or Security Engineer – Job Description 

• Researching and analyzing vulnerabilities across ELCA Group, identifying relevant threats (including false positive in findings), provide corrective actions/recommendations, follow-ups, summarizing and reporting results 
• Devise and implement approaches for addressing vulnerabilities include system patching, deployment of specialized controls, code or infrastructure changes, and changes in development processes 
• Design and deliver actionable vulnerability management dashboards and scorecards by prioritizing vulnerabilities along with remediation timelines 
• Provide KPIs/metrics and reporting on the state of system security, threat, vulnerability and patch management for ELCA Group 
• Conduct security investigations and lead security incident response in a cross-functional environment and drive incident resolution 
• Manage Cloud Security in AWS and Azure 
• Perform technical security audits 
• Design and implement custom PowerShell scripts 
• Evaluating the impact of current security trends, advisories & directly related global publications 

Experience and Skills 

• At least 2 years experience cyber-security vulnerability management and analysis 
• Experience in vulnerability scanning using open-source and commercial tools 
• Knowledge of vulnerability scoring systems (CVSS/CMSS) 
• Proven cyber-security knowledge 
• Understanding technical concepts like application security, network & system security 
• Ability to work remotely with resources in different countries 
• Excellent English writing and presentation skills are required to communicate findings and status (French is highly desirable) 
• Detail oriented, organized, methodical, follow up skills with an analytical thought process 

Qualifications 

• Bachelor’s Degree in Computer Science, Information Technology, Cyber Security, or related discipline 
• Professional Certifications will be a plus (Certified Ethical Hacker [CEH], Certified Vulnerability Assessor [CVA], Offensive Security Certified Professional [OSCP])