Vulnerability Scanning Engineer II

at  Walmart Canada

POSITION SUMMARY…

This position, in partnership with Global InfoSec, will be responsible for enhancing and maintaining Walmart Canada’s overall security posture. The role acts as a security and risk subject matter expert and provides guidance concerning IT risks. The role will require planning, coordinating and implementing security policies, policies, procedures and controls to protect cybersecurity, incident response, threat assessment, software security, and vulnerability assessment and remediation services.

MINIMUM QUALIFICATIONS…

Outlined below are the required minimum qualifications for this position. If none are listed, there are no minimum qualifications.
Age – 16 or older

PREFERRED QUALIFICATIONS…

Outlined below are the optional preferred qualifications for this position. If none are listed, there are no preferred qualifications.
Walmart will accommodate the disability-related needs of applicants and associates as required by law.

WHAT YOU’LL DO:

• Partnering with our Global and Internal Security teams to ensure we meet and exceed industry IT security compliance, corporate policies, standards and procedures and administer and support key management systems, multi-factor authentication, and other InfoSec services.
• Assessing risks for 3rd party vendors accessing Walmart data. Lead and coordinate action plan to mitigate any risks associated with such access.
• Utilize tracking tools/capabilities in a vulnerability management system to identify, analyze, and develop mitigation or remediation actions for system and network vulnerabilities.
• Analyze publicly disclosed vulnerabilities of vendor software/hardware products and develop the mitigation/remediation orders.
• Compile daily, weekly, monthly and annual vulnerability metrics associated with affected and non-compliant technology and security assets.
• Develop required dashboard/tools/process to manage daily tasks and projects assigned to the InfoSec team.
• Research and Analyze user level access to all network resources through regular audits. Document and Report findings.