Sr. Vulnerability Management & SOAR Engineer
New Balance Athletics, Inc.20 days ago
Boston, MA, USASenior
Base Salary
$105k - $156k/yr
Responsibilities
- Own and continuously mature the enterprise Vulnerability Management Program across hybrid, cloud, containerized, endpoint, network, embedded, and application environments.
- Manage vulnerability discovery, validation, prioritization, remediation tracking, exception management, verification, reporting, and critical-vulnerability response.
- Operate vulnerability assessment technologies and correlate findings from scanners, application security tools, cloud and container security platforms, attack surface management solutions, and threat intelligence sources.
- Coordinate remediation across technical teams, manage risk acceptance and compensating controls, and maintain vulnerability policies, standards, procedures, runbooks, and reporting frameworks.
- Develop metrics for risk reduction, remediation performance, vulnerability trends, asset coverage, SLA adherence, and MTTR, and support audits and compliance assessments.
- Design and maintain SOAR playbooks and integrations that automate vulnerability intake, triage, enrichment, ticketing, remediation tracking, exception handling, and reporting.
- Build scripts, APIs, and automated workflows to improve security operations efficiency and reduce manual effort.
- Partner with Infrastructure, Cloud Engineering, Application Development, DevOps, Architecture, Security Operations, and Technology teams to reduce cyber risk.
Requirements
- 5+ years of experience in Vulnerability Management, Security Operations, Security Engineering, Cybersecurity Risk Management, or related security disciplines.
- 3+ years directly managing or owning enterprise vulnerability management programs in hybrid cloud and on-premises environments.
- Experience administering enterprise vulnerability management platforms such as Tenable, Qualys, Rapid7, or Microsoft Defender Vulnerability Management.
- Expertise in vulnerability assessment, credentialed scanning, vulnerability validation, risk prioritization, and remediation management.
- Understanding of CVE, CVSS, CISA KEV, exploit intelligence, threat intelligence, attack surface management, and risk scoring methodologies.
- Experience with Azure, AWS, or GCP and with vulnerabilities in cloud-native, containerized, and modern application environments.
- Scripting and automation experience using Python, PowerShell, Bash, REST APIs, or similar technologies.
- Experience building security automations with Microsoft Sentinel, Cortex XSOAR, Splunk SOAR, Swimlane, Tines, or similar platforms.
- Familiarity with application security concepts, vulnerability metrics, KPIs, dashboards, remediation SLAs, and executive reporting.
- Understanding of operating systems, network infrastructure, software development processes, and enterprise technology environments.
- Preferred experience supporting NIST, CIS, ISO 27001, SOC 2, PCI-DSS, CMMC, or similar compliance frameworks.
- Strong communication and stakeholder management skills, with the ability to influence technical and business audiences.
- Preferred certifications include CISSP, CySA+, Security+, GSEC, GCSA, OSCP, and GIAC certifications, or equivalent experience.
Benefits
- The role is open to remote work, with New Balance’s North American hybrid model generally requiring office work Tuesday through Thursday and offering four weeks of Work from Anywhere per calendar year.
- Benefits include medical, dental, vision, life insurance, 401K, online learning and development, tuition reimbursement, $100 monthly student loan support, mentorship programs, a $1,000 yearly lifestyle reimbursement, four weeks of vacation, 12 holidays, and generous parental leave.
- Off-hours support and travel may be required.
- The position is a regular associate role; temporary and part-time associate benefit details are also provided in the posting.
Tech Stack
Categories