Senior Vulnerability and Exposure Management Analyst

SENIOR ANALYST, VULNERABILITY AND EXPOSURE MANAGEMENT

About News Corp:

News Corp is a global diversified media and information services company focused on creating and distributing authoritative and engaging content to consumers and businesses throughout the world. The company comprises businesses across a range of media, including: news and information services, book publishing, digital real estate services, cable network programming as well as pay-tv distribution in Australia.

What You ll Do

Research and report on security vulnerabilities and the latest advancements in the vulnerability management lifecycle. Collaborate and coordinate with team members, partners and relevant businesses within the News Corp community.

Responsibilities

Understand and work against scan results from multiple types of vulnerability assessment systems (Cloud Security Posture Management (CSPM) and Vulnerability Management (VM))

Ensure client agent coverage is managed at an acceptable level.

Support business with Vulnerability Management prioritisation

Understand the current state of the components in the IT stack ranging from networking, storage, compute (virtualization, containers), applications & security mgmt.

Collaborate with team-mates and understand the threats, vulnerabilities and risks to the enterprise

Develop meaningful measures of the current state of findings to produce meaningful and business-friendly metrics

Prepare reports regarding the status of findings, including the cause of the state of the finding (repaired, expired, reopened)

Daily Monitoring of findings and scanning systems, in order to detect and repair related technology hygiene

Collaborate with cybersecurity partners to understand the criticality of exposure via intelligence, as well as a technical understanding of the exposure through its control points and exploitability as well as CVSS and EPSS scoring

Govern life cycle issues where upgrades are required instead of patching Automate vulnerability management tasks

Train and mentor junior engineers

Required Experience & Qualifications

Ability to conduct the following activities:

o Identify false and true positives alerts and investigate their implications

o Analyze the severity of vulnerabilities, log the vulnerability information into a repository, alert the remediation team, and coordinate to close the listed vulnerabilities.

o Provide recommendations to improve the effectiveness of the scanning tool to reduce future false positives

Conducting communications to the respective audiences at the proper frequency

Managing root cause analysis and lessons learned to accommodate growth in maturity and improve overall technical hygiene

Prioritise responses to accommodate scale and business needs

Must have experience working in a Cloud first environment, preferably AWS In addition to experience with traditional scan based vulnerability assessment must have experience with Cloud Security Posture Management (CSPM)

Desired Qualifications

Excellent verbal, written, and interpersonal communication skills

Experience working in a large enterprise environment

Strong analytical skills with high attention to detail and accuracy

Able to work effectively, as well as independently, in a team environment Strong organisational, multi-tasking, and prioritising skills

Able to meet time-sensitive deadlines required

Able to work collaboratively and build consensus is essential

Able to make sound decisions and exercise good judgement

Able to work and achieve goals without constant supervision

Able to handle confidential material in a professional manner

Able to transform complex data into meaningful and prioritised action Able to create business friendly visualisations for complex datasets

Preferred Skills & Knowledge

Basic knowledge and experience in administering IT components (systems, networks, servers, and cloud-related components)

Experience performing analysis and reporting in Splunk

Experience and comfortability working with Python

Capable of developing dashboarding solution

Location:

Working Arrangement: Hybrid a minimum of three days in office per week

Equal Opportunity Employer

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, protected veteran status, or disability status. EEO/AA/M/F/Disabled/Vets

This job is posted with NTS Technology Services Pvt. Ltd.

Job Category:

News Corp is a global, diversified media and information services company focused on creating and distributing authoritative and engaging content to consumers throughout the world. The company comprises businesses across a range of media, including: news and information services, book publishing, digital real estate services, cable network programming in Australia, and pay-tv distribution in Australia.

Headquartered in New York, the activities of News Corp are conducted primarily in the United States, Australia, and the United Kingdom.