[Hiring] Lead InfoSec Engineer @Alteryx

Role Description

As a Senior Vulnerability Management Engineer, you will be responsible for managing projects and initiatives focused on reducing cyber security risk associated with system vulnerabilities across the enterprise. You will assist in governing and maturing Alteryx’s vulnerability program while managing technology vulnerabilities, researching cyber incidents and effectively co-leading comprehensive investigations and other security related activities.

Primary Responsibilities:

• Contribute to the vulnerability management process including triaging identified vulnerabilities and tracking them through the vulnerability lifecycle.
• Be an integral part of our vulnerability management program ensuring we are monitoring for known vulnerabilities which pose a risk to our platform.
• Installation, monitoring, testing, troubleshooting, and administration of the vulnerability scanning tools.
• Use our threat intelligence & vulnerability data to ensure we’re effectively responding to potential adversaries.
• Partner with multiple engineering teams to ensure we’re effectively monitoring our cloud and container infrastructure.
• Perform security and technical analysis of solutions, design decisions and threats.
• Ensure scheduled scans are covering 100% of intended assets and are being run successfully.
• Configure, optimize, and test vulnerability scans against new and existing Operating Systems and platforms.
• Ability to develop effective communication and remediation plans for a variety of stakeholders including IT, Engineering, and Security.
• Developing process documentation including contributions to policies and procedures.

Qualifications

• Bachelor’s degree in Computer Science or related field or equivalent experience/training.
• 5+ years in an Information Security or IT role, preferably in red teaming, offensive security, penetration testing, reverse engineering, incident response, vulnerability management, or consulting.
• Proficiency with enterprise vulnerability management platforms such as Tenable.io, Rapid7, Qualys, etc.
• Demonstrated success with Vulnerability Management program(s) or remediation efforts.
• Strong skills in engineering and operational tools and technologies e.g., Terraform, Ansible, Git, Jenkins, Docker, Kubernetes – trying to get rid of Jenkins.
• Knowledge about CI/CD practices and experience incorporating security requirements into a SDLC.
• Strong skills in critical thinking, decision making, problem solving, and attention to detail.

Requirements

• Industry security certifications such as CISSP, or others.
• Strong knowledge in major cloud environments such as AWS, GCP or Azure.

Benefits

• A monthly Connectivity Plus stipend of $150 to support remote work-related expenses.
• An annual $200 home office reimbursement.
• Medical, dental, and vision coverage.
• 401(k) with company match.
• Paid parental leave, caregiver leave, and flexible time off.
• Mental health support and wellness reimbursement.
• Career development and education assistance.