Vulnerability Remediation Engineer

Position Summary

In this role, the Associate Vulnerability Remediation Engineer II will aid in driving the execution of a Global Infrastructure Vulnerability Remediation program to reduce security risks for MetLife. This role includes supporting the implementation of a global strategy to govern, analyze, prioritize, and drive the execution of infrastructure vulnerability remediation, increasing MetLife's security posture. The position will help define the requirements and roadmap for remediation with cross-functional stakeholders to deliver solutions and evangelize the vision to strengthen the security posture within MetLife, JV's, and 3rd party providers.

Job Responsibilities

Job Responsibilities:

• Collaborate with the Vulnerability Management team and business customers to deliver on business expectations, timelines, budgets and communicates impacts early and often in a fast-paced environment with frequent changes in priority
• Relationship Management - Liaise and work with the existing technology teams around the globe, with a focus on cybersecurity, threat assessment, and vulnerability remediation areas
• Work to maintain global security standards, guidelines, metrics, and implement processes and procedures to ensure an acceptable risk level is maintained with adherence to a recognized framework
• Analyze a detailed register of all open vulnerabilities, exceptions, and remediation actions to ensure constant improvement of the discovered risk surface

Education, Technical Skills & Other Critical Requirement

Education

• IT Graduate
• Basic IT Infrastructure & Incident Response Knowledge

Experience

(In Years)

• Total of 7 years of Experience with atleast 4 years related to vulnerability management and/or vulnerability remediation
• Ability to support large organizations around strategic initiatives within a global company
• Strong interpersonal and collaboration skills, including the ability to build relationships at all levels, work cross-organizationally, and lead through influence
• Solutions-orientation; perceives and either resolves or escalates risks or obstacles as appropriate. Strong synthesis and learning agility; connects dots and thinks strategically about business planning, governance, and solutions.
• Basic Knowledge of various industry security standards and frameworks ex, NIST, ISO, CIS
• Solid presentation skills
• Must process problem solving, planning, and analytical skills to drive continuous improvements

Technical Skills

• Experience supporting, maintaining, and engineering Qualys or other vulnerability scanning tools is a plus
• Familiar with products offered by industry-leading cybersecurity companies including, but not limited to: CrowdStrike, Splunk, Palo Alto, SolarWinds, Netbrain, Cisco, Kenna, Qualys, ForcePoint, QRadar, Abnormal Security, Adaptive Endpoint Health, Tanium, Active Directory, VPN, Venafi, OpenCTI, AttackIQ, Ransomware Guard, SCCM, and PowerBI
• Intermediate MS Office skills
• Must have prior experience with at least one vulnerability management tool: Qualys & Kenna preferred
• Must have experience remediating vulnerabilities (not including basic OS patching); patch deployment experience is a plus

Other Critical Requirements Like Voice/ Non-Voice for Insurance Ops

• Basic OS & Network Understanding (ports, services, DNS, Active Directory) ,
• Good verbal & written communication
• Good presentation, written, oral, and relationship-building skills
• Excel proficiency
• Experience with scripting is a plus