Sr. Security Engineer - Vulnerability Management

Tranzeal is looking for Sr. Security Engineer - Santa Clara, CA. Please share your updated resume if you are available in the job market.

• Working closely with engineers and developers from Bigdata and Monitoring Engineering teams, the candidate will be focused on keeping the ServiceNow Bigdata and Monitoring infrastructure in compliance with vulnerability management policy.
• Will be an integral part of the BigData and Monitoring teams and closely partner with the Compliance and Security teams.
• The role will require a technical understanding of Linux infrastructure and configuration management implementations to improve Compliance and Security.

• Monitor and handle vulnerability findings in ServiceNow's vulnerability tracking system to maintain compliance (Tenable).
• Work with our software vendors (Cloudera, VMWare, etc.) closely to get and test the latest software release with fixes to resolve vulnerabilities.
• Perform maintenance and patching procedures to resolve vulnerabilities in both commercial and US regulated market data centers.
• Perform patch management and vulnerability tracking.
• Develop tools and processes to automation and streamline complex maintenances and audits.
• Work with Linux OS patching to ensure they are compliant to improve compliance and reduce vulnerability.
• Keeping your knowledge and skills current with the rapidly changing threat landscape and proactively fix vulnerabilities that may come in future.
• Knowledge of Docker images and remediation of vulnerabilities inside Docker images is a plus.
• Write knowledge articles as needed.

• The ideal candidate will understand the components of software infrastructure, including hardware platforms, OS, virtualization, application, web and application servers.
• Candidate must have excellent communication skills and work well in a collaborative team environment.

• At least 5 years of related experience.
• Strong understanding of Linux and Java (JVM, log4j).
  • Experience in at least one security domain (e.g., infrastructure security, web security, etc.) Hands-on experience with server patching and vulnerability management.
• Experience with Secure Configuration/Hardening of Systems.
• At least working knowledge of bash scripting, Python, or other scripting language.
• Experience with puppet or ansible, Linux package management (RPM's).
• US citizen with public trust clearance.