Sr. Cybersecurity Vulnerability/Exposure Engineer
Cboe Global Markets1 day ago
Base Salary
$131k - $169k/yr
Responsibilities
- Execute and continuously improve Cboe’s risk-based Vulnerability Management Program to reduce risk across global IT infrastructure.
- Analyze vulnerability scan results, assess enterprise risk, and coordinate remediation with infrastructure and application teams.
- Design, operate, and maintain vulnerability scanning and assessment infrastructure for comprehensive and reliable coverage.
- Automate and integrate vulnerability detection, analysis, remediation tracking, reporting, and security operations workflows.
- Serve as a senior escalation point for vulnerability-related tickets and advise on prioritization, remediation, and risk acceptance.
- Normalize and integrate data from security and infrastructure technologies to support analysis, reporting, and response.
- Partner with infrastructure, application, and platform teams on remediation, policy compliance, and security-control improvement.
- Evaluate emerging vulnerabilities, threats, and security technologies and assess their impact on Cboe’s security posture.
- Lead vulnerability management discussions and present risk, trends, and escalation items to technical stakeholders, management, and executives.
- Mentor junior team members, document standards and procedures, and share technical and organizational expertise.
Requirements
- Minimum five years of security experience, or three years of security experience plus two to three years in core IT roles such as system or network administration.
- At least two years of experience in vulnerability monitoring, threat detection, event monitoring, or incident response.
- Expert hands-on experience with vulnerability management and cloud/SaaS security platforms, including the ability to install, configure, and operate enterprise tools.
- Strong Python scripting and automation skills for security operations, tool integration, and data analysis.
- Advanced use of AI productivity and coding tools, including Copilot, ChatGPT, Claude Code, Cursor, and N8N.
- Experience administering Linux/Unix, Windows, Active Directory, and Entra ID environments, managed network devices, and network segmentation.
- Familiarity with Microsoft security tools including Defender for Endpoint, Defender for Identity, Defender for Cloud Apps, Purview DLP, and Intune.
- Experience with Atlassian Jira and Confluence, including workflow design and automation for vulnerability and remediation tracking.
- Experience creating reporting visualizations with Power BI, Sigma, or Snowflake.
- Strong English communication skills for conveying technical risk, remediation guidance, and impact analysis.
- Demonstrated ability and willingness to mentor junior team members.
- Bachelor’s or advanced degree in Cybersecurity, Computer Science, Engineering, or another technical field is preferred.
- Centralized Windows, Linux, network, or firewall administration experience is preferred.
- Information security certifications such as GPEN, Security+, CISSP, OSCP, CEH, or LPT are preferred.
- Experience writing and leveraging AI tooling to solve problems creatively and efficiently is preferred.
Benefits
- Four days per week in the office, with a flexible hybrid work environment.
- Competitive base salary and incentive compensation packages.
- Generous paid time off, including vacation, personal, sick, and community service days.
- Health, dental, and vision benefits with telemedicine and mental health services.
- 2:1 401(k) match, up to an 8% match immediately upon hire.
- Discounted employee stock purchase plan and tax savings accounts for health, dependent, and transportation expenses.
- Employee referral bonuses and volunteer opportunities.
- Complimentary lunch, snacks, and coffee in Cboe offices.
- Paid tuition assistance and education opportunities.
- Charitable giving company match, paid parental leave, and fertility benefits.
- On-site gyms and discounts at other fitness centers.
About Cboe Global Markets
Cboe Global Markets operates exchanges and market infrastructure for options, equities, futures, FX, ETPs, and digital assets used by brokers, banks, and institutional and retail investors. Its revenue comes from transaction and listing fees, market data and index licensing (including VIX and SPX), and related services. Founded in 1973 and headquartered in Chicago, it runs Cboe Options and Cboe Futures exchanges as well as European trading venues.