About the role
Responsibilities:
- You will help advance Point72's vulnerability management program across a modern, cloud-enabled technology environment, turning security findings into measurable risk reduction.
- Shape the evolution of Point72's vulnerability management program by improving how teams discover, prioritize, remediate, and measure risks across technology environments.
- Engineer automation that reduces manual vulnerability workflows, accelerates remediation, and improves the quality of security data used by teams and leaders.
- Assess vulnerabilities across cloud, container, server, endpoint, and application environments to identify material risks and drive timely remediation.
- Partner with infrastructure, cloud, development, and security teams to translate findings into clear remediation plans that align with production realities.
- Develop risk-based prioritization methods that account for exploitability, asset criticality, exposure, and business context.
- Improve container and cloud vulnerability coverage by refining scanning processes, integration points, and remediation feedback loops.
- Create dashboards and reports that show vulnerability trends, remediation progress, control gaps, and areas requiring leadership attention.
- Investigate emerging threats and vulnerability disclosures to determine potential exposure and coordinate response actions across affected teams.
- Document standards, processes, and technical guidance that help teams consistently manage vulnerabilities throughout the technology lifecycle.
Requirements:
- Professional experience in information security, with hands-on responsibility for threat and vulnerability management in enterprise technology environments.
- Demonstrated experience maturing a vulnerability management program, including discovery, prioritization, remediation tracking, exception handling, and management reporting.
- Hands-on experience securing cloud-based environments, including vulnerability assessment, misconfiguration analysis, exposure review, and remediation coordination.
- Hands-on experience with container security, including image scanning, runtime risk assessment, and vulnerability remediation in containerized environments.
- Strong automation and scripting skills for integrating security data, improving workflows, and reducing manual operational effort.
- Solid understanding of vulnerability severity, exploitability, asset criticality, attack paths, and risk-based remediation approaches.
- Ability to analyze security findings, validate risk, identify false positives, and communicate practical remediation guidance to technical teams.
- Strong collaboration and ownership skills, with the ability to drive remediation across technology stakeholders in a global environment.
- Excellent written and verbal English communication skills for reporting risk, explaining technical issues, and influencing remediation outcomes.
- Commitment to the highest ethical standards.