Senior Vulnerability Analyst

This is a Full Time Job

Overview and Responsibilities:

The Paramount Technology department supports our global content company through the delivery of a high-quality viewing experience, system infrastructure support, and creating innovative ways for our employees to collaborate. If you are interested in a strategy that has growth, transformation, and on-going innovation where you can help “reinvent the broadcasting wheel” Paramount Tech has a role for you…

Paramount is hiring a Senior Vulnerability Analyst to join its Vulnerability Management Team. The position is responsible for supporting the Information Security organization's efforts to manage vulnerabilities in all global Paramount systems, including those supporting streaming, broadcasting, content delivery, and corporate business units. It will focus on using a number of tools to identify and report on vulnerabilities on cloud infrastructure, workstations, data center systems, network equipment, and applications.

Responsibilities include:
• Maintain, optimize, configure, and solve the vulnerability management solutions deployed enterprise-wide
• Perform enterprise-wide scheduled and ad-hoc vulnerability assessments, including network, agent, and authenticated scans
• Ensure coverage and accuracy of the various vulnerability scanning and reporting tools throughout the infrastructure and applications
• Develop and integrate dynamic and data-driven dashboards and workflows that provide up to date vulnerability information to asset owners and leadership teams
• Improve procedures by automating Vulnerability Management processes through data extraction/transformation and tool integrations
• Review and refine vulnerability findings to reduce false positives and other issues
• Collaborate and communicate detailed vulnerability findings to the teams responsible for remediation
• Leverage criteria such as threat intelligence, asset and business impact, and compensating controls to develop risk prioritization standards that help target remediation activities and program goals.
• Assist in vulnerability management platform configurations, evaluations and POVs
• Design and deliver clear, actionable Vulnerability Management reports, metrics, and briefings
• Review new vulnerabilities, assess potential risks to Paramount, and draft alert bulletins
• Apply standard processes and develop security documentation under the guidance of Vulnerability Management leads
• Collaborate with technical leads across Paramount to ensure assets are appropriately covered by the Vulnerability Management program
• Work with asset owners and technical teams to develop scanning schedules, configurations, and asset exclusion lists for each Business Unit

Basic Qualifications
• 3 years of experience and Bachelor's degree in Information Security, Computer Science, Information Technology, or related field, or equivalent combination of education and experience
• Hands on experience and knowledge of cloud-based and on-premise environments, as well as enterprise Vulnerability Management tools.
• Demonstrable understanding and experience with vulnerability management, mitigation activities, patch management, and system hardening standard processes.
• Experience reviewing and communicating vulnerability information found in CVEs, CVSS, vendor alerts, threat intelligence reports, and emerging risk-based criteria.
• Solid grasp of major operating systems, network and web services, and cybersecurity technologies

Additional Qualifications
• Information security certifications
• Understanding of industry security frameworks and standards (ISO, NIST, CIS)
• Proficiency in analyzing and transforming data using Excel, Power BI, presentation tools, and ETL tools
• Self-starter with ability to work individually in a fast-paced environment, as well as in a team environment with geographically distributed team-members
• Superb attention to detail, problem-solving, communication, and collaboration skills
• Ability to excel, adapt, and work expertly and positively to contribute with advancing team objectives
• Experience with system administration tools and processes
• Familiarity with DevOps, CI/CD, and development methodologies

ADDITIONAL INFORMATION

Hiring Salary Range: $115,000.00 - 125,000.00. The hiring salary range for this position applies to New York, California, Colorado, Washington state, and most other geographies. Starting pay for the successful applicant depends on a variety of job-related factors, including but not limited to geographic location, market demands, experience, training, and education. The benefits available for this position include medical, dental, vision, 401(k) plan, life insurance coverage, disability benefits, tuition assistance program and PTO or, if applicable, as otherwise dictated by the appropriate Collective Bargaining Agreement. This position is bonus eligible.