Senior Vulnerability Analyst

Job Description

Overview & Responsibilities:

Paramount is seeking a highly motivated Senior Vulnerability Analyst to join its Vulnerability Management Team. The position is responsible for supporting the Information Security organization's efforts to manage vulnerabilities in all global Paramount systems, including those supporting streaming, broadcasting, content delivery, and corporate business units. It will focus on using a number of tools to identify and report on vulnerabilities on cloud infrastructure, workstations, data center systems, network equipment, and applications.

Responsibilities include:
• Maintain, optimize, configure, and solve the vulnerability management solutions deployed enterprise-wide.
• Perform enterprise-wide scheduled and ad-hoc vulnerability assessments, including network, agent, and authenticated scans.
• Ensure coverage and accuracy of the various vulnerability scanning and reporting tools throughout the infrastructure and applications.
• Develop multifaceted dashboards in vulnerability management platforms that provide up to date vulnerability information to asset owners and leadership teams
• Assist in vulnerability management platform evaluations and POVs.
• Improve procedures by automating Vulnerability Management processes through data extraction/transformation and tool integrations
• Collaborate with technical leads across Paramount to build security documentation and ensure assets are appropriately covered by the Vulnerability Management program.
• Work with asset owners and technical teams to develop scanning schedules, configurations, and asset exclusion lists for each Business Unit.
• Review and refine vulnerability findings to reduce false positives and other issues.
• Refine vulnerability findings to the teams responsible for remediation.
• Leverage criteria such as CVSS, exposure, asset criticality, and compensating controls to develop risk prioritization standards that help Business Units and asset owners target remediation activities.
• Compile and deliver actionable monthly vulnerability reports, metrics, and briefings to stakeholders.
• Review new vulnerabilities, assess potential risks to Paramount, and draft alert bulletins.

Basic Qualifications:
• 3+ years of experience in information security along with a bachelor's degree in information security, Computer Science, Information Technology, Data Analytics, or related field or equivalent combination of education and experience
• Hands on experience and knowledge of Vulnerability Management tools for cloud and on-prem systems. Demonstrable understanding and experience with vulnerability management, mitigation activities, patch management, and system hardening best practices.
• Experience reviewing and communicating vulnerability information found in CVEs, CVSS, vendor alerts, and threat intelligence reports in addition to an excellent understanding of major operating systems, network and web services, and cybersecurity technologies

Additional Qualifications:
• Information security certifications
• Understanding of industry security frameworks and standards (ISO, NIST, CIS)
• Strong critical thinking and problem-solving skills.
• Ability to inspire change and cultivate a culture of continuous improvement.
• Superb communication and interpersonal skills.
• Proficiency in analyzing and transforming data using Excel, Power BI and ETL tools.
• Strong knowledge of cloud infrastructure
• Experience with system administration tools and processes
• Familiarity with DevOps, CI/CD, and development methodologies

ADDITIONAL INFORMATION

Hiring Salary Range: $110,000.00 - 120,000.00.

The hiring salary range for this position applies to New York City, California, Colorado, Washington state, and most other geographies. Starting pay for the successful applicant depends on a variety of job-related factors, including but not limited to geographic location, market demands, experience, training, and education. The benefits available for this position include medical, dental, vision, 401(k) plan, life insurance coverage, disability benefits, tuition assistance program and PTO or, if applicable, as otherwise dictated by the appropriate Collective Bargaining Agreement. This position is bonus eligible.

https://www.paramount.com/careers/benefits

Paramount is an equal opportunity employer (EOE) including disability/vet.

Jobcode: Reference SBJ-d5n1ee-18-119-142-123-42 in your application.