Centene Corporation · 19 hours ago
Lead Vulnerability Management Analyst
Centene Corporation is a diversified national organization that aims to improve health outcomes using technology. The Lead Vulnerability Management Analyst will lead the organization's vulnerability management infrastructure and processes, working with stakeholders to create strategies for prioritizing and remediating vulnerabilities across various assets.
Hospital & Health Care
Responsibilities
Assesses vulnerabilities across applications, endpoints, databases, networking, mobile and cloud assets
Conducts continuous discovery and vulnerability assessment of enterprise-wide assets
Reviews reports, assets and vulnerability state; recommend remediation and validation approaches
Partners with various IT and application teams in remediation efforts to ensure vulnerabilities have been appropriately remediated or managed in a timely manner
Stay abreast of vulnerability results to technical and non-technical business units based on risk tolerance and threat to the business. Gain stakeholder support through influential messaging
Leverages vulnerability database sources to understand systems weaknesses, its probability and remediation options, including vendor-supplied fixes and workarounds
Directs the research of new technologies and works with key stakeholders to assess risk and implement and/or validate controls as necessary
Reviews vulnerabilities data from multiple sources (i.e., external / internal penetration testing, internal / external vulnerability scanning, etc.) across multiple technologies and environment including infrastructure and applications to determine risk rating of vulnerabilities to business assets
Works with Technology teams in static (SAST) and dynamic (DAST) scanning analysis to understand application threats and vulnerabilities
Performs other duties as assigned
Complies with all policies and standards
Qualification
Required
A Bachelor's degree in a quantitative or business field (e.g., statistics, mathematics, engineering, computer science) and requires 5 – 7 years of related experience
5+ years Vulnerability Management, Pen testing or related
OWASP framework and the software development lifecycle
Familiar with the laws, regulations, industry standards and guidance pertaining to data protection and information security in the healthcare industry
Experience in vulnerability scanning, security information and event management (SIEM), penetration testing, and/or advanced malware protection
Experience with SAST and DAST tools and technologies
Knowledge of Health Insurance Portability and Accountability Act (HIPAA), Payment Card Industry Data Security Standard (PCI DSS), Service Organization Controls (SOC) 2, Sarbanes–Oxley Act (SOX), etc
Intermediate - Seeks to acquire knowledge in area of specialty
Intermediate - Ability to identify basic problems and procedural irregularities, collect data, establish facts, and draw valid conclusions
Intermediate - Ability to work independently
Intermediate - Demonstrated analytical skills
Intermediate - Demonstrated project management skills
Intermediate - Demonstrates a high level of accuracy, even under pressure
Intermediate - Demonstrates excellent judgment and decision making skills
Intermediate - Ability to communicate and make recommendations to upper management
Intermediate - Ability to drive multiple projects to successful completion
Intermediate - Possesses technical aptitude
CISSP Certified Information Systems Security Professional or Certified Information Security Manager (CISM) or GIAC Enterprise Vulnerability Assessor (GEVA) required
Benefits
Competitive pay
Health insurance
401K and stock purchase plans
Tuition reimbursement
Paid time off plus holidays
Flexible approach to work with remote, hybrid, field or office work schedules
Company
Centene Corporation
Centene Corporation is a leading healthcare enterprise committed to helping people live healthier lives.
H1B Sponsorship
Centene Corporation has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2021 (1)
Funding
Current Stage
Late StageLeadership Team
Recent News
Business Journals
2024-05-06
FierceHealthcare
2024-04-28
Company data provided by crunchbase