PRINCIPAL CYBER VULNERABILITY ENGINEER

The Cyber Vulnerability Operations Team consists of both the Application Security (AppSec) teams and the Vulnerability Management Operations (VM Ops) teams. Together, the Vulnerability Operations team collaborates with peers across Comerica to provide visibility into vulnerabilities within applications and infrastructure and ensures they are remediated, as well as facilitates and enforces the use of secure development practices across the bank.
The ideal candidate will have experience with Qualys Policy Compliance module and VMDR module is required for this role. Ideal candidate will have experience with scripting, regular expressions and expertise in at least one programming language.
The Principal Cyber Vulnerability Operations Engineer role is responsible for vulnerability scanning, prioritizing vulnerabilities, and driving remediations while partnering with the application and infrastructure teams. The ideal candidate for this role will have hands-on expertise working in vulnerability management and operations and will have knowledge of tools such as Qualys, PowerBI, and/or SAST/DAST. This candidate will be experienced working with cross-functional teams in vulnerability management and prioritization and will have the ability to automate while using a programming language.

POSITION QUALIFICATIONS:

• Bachelor’s Degree from an accredited university in Computer Science, Engineering, Information Systems, Cybersecurity, or Business Administration OR equivalent through a combination of High School/GED education and/or technology experience OR 12 years of relevant experience
• 6 years of experience in Cyber or Information Security, preferably in Vulnerability Management and Security in the financial services industry
• 5 years of experience in collaborating across Enterprise IT and Security to remediate vulnerabilities identified
• 3 years of experience with programming concepts and fundaments (e.g. Python, .Net, Java, Java Script, or Powershell) and ability to automate with those tools
• 2 years of experience Vulnerability assessments, including creating, maintaining, and troubleshooting scan configurations across the enterprise
• 2 years of experience with Vulnerability Management across cloud platforms and with EVM management/prioritization
• 2 years of experience with endpoint protection technologies
  WORK BEST CATEGORY:Category C - Days in the office will either be designated days or will vary week to week from 2-5 days
  HOURS:8:00am - 5:00pm Monday - Friday
  SALARY:To Be Determined Based on Individual Experience