Summary
We are looking for an experienced, Staff Vulnerability Management Engineer who can navigate complex threat scenarios and remain committed to decreasing the overall attack surface of the company. Enterprise Vulnerability Management remains a top priority at Guidewire, and you will be responsible for implementing and managing enterprise vulnerability tools and processes in a cloud setting, to reduce technical risks due to vulnerabilities and misconfigurations. This includes identifying and evaluating vulnerabilities and supporting remediation activities by actively collaborating with stakeholders.
Job Description
Develop and execute a strategic vision for Vulnerability Management (VM) that ensures the right balance of safety and agility.
Partner with development teams to design and implement security controls in vulnerability detection, prevention, and remediation.
Brief and engage with engineering leaders in operational reviews and written updates.
Drive continuous improvement in the vulnerability management process.
Review all applicable threats,
discover vulnerabilities/cloud misconfigurations and collaborate with remediation treatment owners to prioritize, provide context and remediate identified vulnerabilities.
Ensure knowledge creation around vulnerability management process, common vulnerabilities within the landscape and corresponding remediation practices.
Research the latest security best practices and technologies, staying on top of new threats and vulnerabilities to create threat briefs and provide timely assessment reports to key stakeholders.
Supporting compliance and risk management activities, recommending security controls and corrective actions to mitigate vulnerability risks.
Actively use Guidewire tools, automation, and responsible AI capabilities to increase your productivity and improve the quality and consistency of project outcomes.
Requirements
Prior experience with managing and configuring any vulnerability management tool and ri