Information Security Engineer

Information Security Engineer needs current Rapid7 and vulnerability experience.

Information Security Engineer requires:

1. Minimum of 4 years of information systems experience, with hands-on Threat and Vulnerability Management experience.
2. Experience with Rapid7 IVM, including tool set-up, administration, and reporting.
3. Experience with both credential and agent-based scanning and deployment of both.
4. Hold at least one Information Security certification (CompTIA, Security+, CISSP, EnCE, etc.).
5. Excellent verbal and written communication skills with the ability to convey information to internal and external customers clearly and concisely.
6. Proven ability to recognize opportunities for change and act as a catalyst for change management.
7. Demonstrated ability to apply technology solutions to business problems.
8. Travel of 5% anticipated but may be more based on business needs.
9. Familiarity with medical diagnostics.
10. Proven ability to learn new technology, engage stakeholders in solution design, deploy technology, and develop documentation with limited supervision.
11. Defines, drives, and improves technical-related processes.
12. Acts as technical author and reviewer for vulnerability reports and threat advisories.
13. Plan, facilitate, and attend regular meetings relating to the services and interaction with IT infrastructure areas.
14. Resource allocation/scheduling to meet the demands of delivering a service within an environment of changing priorities or service issues.
15. Use high-level service expertise to influence problem escalations in advanced and complex situations to resolve customer issues and improve service.
16. Proactively analyze information and trends, proposing actions or exceptions to resolve problems, and maintain and enhance service.
17. Establish multiple relationships with senior-level customers and managers across the organization to act as a respected technical interface both internally and externally to deliver and enhance the service.
18. Identifies and manages risk for the team(s) technical skill levels and adequate resources to ensure that risks are mitigated, and problems resolved, in relation to meeting our commitments.
19. Identification of solutions to fix discovered security vulnerabilities.
20. Research known attacks and develop detection methodology for new attacking vectors.
21. Gather relevant architecture information, identify key issues and relationships, and relate/compare data from different sources to identify and develop potential solutions to address needs.
22. Document and diagram the scanning solution and regularly update as required.
23. Support Security Operations and IT team in the deployment scanning solution.
24. Acknowledge the importance of customers by listening to, understanding, and anticipating their needs, giving high priority to customer satisfaction.
25. Perform other duties as assigned by management.
26. Continuous process improvement and documentation.