Associate Vulnerability Management Engineer

Veeva Systems Columbus , OH 43216

Posted 3 weeks ago

At Veeva, we build enterprise cloud technology that powers the biggest names in the pharmaceutical, biotech, consumer goods, chemical & cosmetics industries. Our customers make vaccines, life-saving medicines, and life-enhancing products that make a difference in everyday lives. Our technology has transformed these industries; enabling them to get critical products and services to market faster. Our core values, Do the Right Thing, Customer Success, Employee Success, and Speed, guide us as we make our customers more efficient and effective in everything they do.

The Role

As the Associate Vulnerability Management Engineer, you will play a lead role in driving the evaluation, process, execution, development, and operations of the vulnerability management program at Veeva. You will be responsible for vulnerability identification, analysis, communication, and remediation against common vulnerabilities.

What You'll Do

  • Run and support vulnerability management scans across all Veeva systems.

  • Act as a primary point of contact for vulnerability management.

  • Interpret vulnerability assessment results, assist in the remediation prioritization efforts, and report findings.

  • Establish and maintain vulnerability metrics/KPIs and regular reporting mechanisms for measuring compliance of vulnerability management projects.

  • Validate proper mitigation controls are in place until remediation activities are complete.

  • Benchmark golden images to ensure compliance against industry standards.

  • Maintain patch and vulnerability management best practices to protect against the exploitation of known/detected vulnerabilities.

  • Conduct research on the latest vulnerabilities and exploits.

  • Execute the Vulnerability Management roadmap, strategy, and playbooks in partnership with appropriate product teams across technology and business units.

  • Conduct investigations using software, technology inventories, patch status, and vulnerability exposure.

  • Establish strong working relationships with product teams to ensure vulnerability compliance objectives are met.


  • Technical background in Windows/Unix Operating systems, security technologies, and network architectures.

  • Understanding of threat actors with the ability to articulate how they operate and demonstrate how they subvert common security controls.

  • Strong understanding of network services, vulnerabilities, and attacks.

  • Knowledge of application exploits and vulnerabilities. Knowledge of ports and services typical in the configuration of web servers, file servers, and workstations

  • Knowledge of vulnerability management lifecycle (familiar with CVEs, CVSS, and Mitre)

  • Excellent written and oral communication skills

  • Experience with Microsoft and Unix-based operating systems

Nice to Have

  • Hands-on experience running vulnerability scanning tools

  • Understanding of cloud and container vulnerability management process

  • Security Certifications (i.e. Security+, CISSP, CEH, SANS, etc.)

Veeva's headquarters is located in the San Francisco Bay Area with offices in more than 15 countries around the world.

Veeva is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity or expression, religion, national origin or ancestry, age, disability, marital status, pregnancy, protected veteran status, protected genetic information, political affiliation, or any other characteristics protected by local laws, regulations, or ordinances.

icon no score

See how you match
to the job

Find your dream job anywhere
with the LiveCareer app.
Mobile App Icon
Download the
LiveCareer app and find
your dream job anywhere
App Store Icon Google Play Icon

Boost your job search productivity with our
free Chrome Extension!

lc_apply_tool GET EXTENSION

Similar Jobs

Want to see jobs matched to your resume? Upload One Now! Remove
Associate IT Analyst Database Engineer

Abercrombie & Fitch Co.

Posted 1 week ago

VIEW JOBS 11/12/2020 12:00:00 AM 2021-02-10T00:00 OUR COMPANY Abercrombie & Fitch Co. is a portfolio of lifestyle brands including Abercrombie & Fitch, abercrombie kids, Hollister, and Gilly Hicks. Reaching customers across 120+ countries, we strive to create customer-centric, omni-channel experiences for our global customer base. OUR VALUES How do we do it? Every day, our associates show up and empower one another to stay curious and think big. As a team of relentless innovators, we aren't afraid to dream boldly. We are accountable and aim to the highest caliber to understand, push boundaries and embrace change. We coach, mentor, care, and bring our best selves every day because we are in this together. Whether you lead yourself, a team, or the company, everyone is a leader at A&F. This individual will be part of a team of Database Engineering professionals responsible for all phases of database design, implementation, and support. This individual's primary focus will be production support and project delivery (design & implementation,) across the relational database (Oracle, MSSQL, DB2) landscape, networking with internal customers and vendor support professionals within a fast-moving enterprise environment. In addition, the engineer will be responsible for providing production support for these database platforms, and for contributing to forward looking strategic initiatives within the database engineering portfolio. What will you be doing? * Complete platform upgrades, migrations, patching, performance monitoring under mentoring of Sr. Database Engineer * Provide day-to-day administrative activities, including backup, restore, performance tuning, security management, capacity planning, standards development and enforcement * Investigate and troubleshoot database issues across multiple environments * Monitor database events and proactively optimize system performance * Work in conjunction with other infrastructure, application development, and business groups to understand functionality, scalability, performance, security, and integration requirements at the database tier * Provide a high level of customer satisfaction via detailed communication and effective delivery of technical solutions * Contact vendor support for hardware and/or software problem resolution * Basic understanding of Linux and Windows operating systems, VMware virtualization, networking concepts, networked storage concepts * Be available for rotating 24/7 on-call support What will you need to bring? * 2 years of experience in Database Administration or SQL development * Minimum 4-year degree required * Experience with Database design and architecture principles * Experience with PLSQL or other programming languages * Understanding of basic application development * Understanding of PCI and SOX regulations and how they apply to database systems * Must be a highly motivated self-starter capable of simultaneously prioritizing, and managing a variety of complex project tasks and support activities in a fast-paced environment * Must possess excellent communication skills, both written and verbal * Must possess strong organization skills, including a keen attention to detail ABERCROMBIE & FITCH CO. IS AN EQUAL OPPORTUNITY EMPLOYER Abercrombie & Fitch Co. Columbus OH

Associate Vulnerability Management Engineer

Veeva Systems