The Vulnerability Management Services Sr Analyst will support the remediation of Workstation security vulnerabilities globally. The role will work closely with Information Security, as well as infrastructure, application and IT management teams.
Responsibilities
Act as Workstation patching and vulnerability remediation subject matter expert
Implement best practices for automated Workstation patch management and deployment
Collaborate with infrastructure and application teams to address the end-to-end Workstation patching process
Collaborate with the Information Security team to identify initiatives, develop remediation strategies, and report on vulnerability reduction
Analyze data to identify potential patch-related issues on golden images and lead remediation efforts with the corresponding teams
Monitor for vulnerabilities, threats and remediation
Oversee the testing of patches and patch remediation
Verify vulnerability remediation through vulnerability scanning and reporting
Develop automation scripts to improve manual targeted patching activities (e.g., corrupt software)
Lead troubleshooting/incident, knowledge,
change, problem and request management for Workstation patching
Partner with business, IT backline teams and other technology partners to prioritize security patching of critical global infrastructure
Partner with external vendors to ensure PepsiCo expectations and needs are met
Partner with infrastructure and/or IT support team management (App, Compute, DB, Network) to ensure the number of high and critical vulnerabilities is reduced
Provide quality assurance of services and ensures the team meets expectations
Ensure compliance with key patching, vulnerability and security controls
Qualifications
Fluent English required (oral and written)
8+ years of Workstation administration or vulnerability management
Experience with Cloud environments (e.g., Azure)
Robust scripting experience (e.g., PowerShell, Python)
Experience communicating with technical audience in high-availability critical settings
Experience supporting complex technical solutions