A Society Group, Inc. San Francisco , CA 94016
Posted 2 weeks ago
We are looking for a Cybersecurity Analyst to join our Product Security team. This role is responsible for identifying, triaging, remediating, and reporting on vulnerabilities in software and cloud infrastructure of self-driving vehicle product.
What you will do (Responsibilities)
● Own the vulnerability management lifecycle end-to-end, from detection through triage, ownership identification, validation, resolution, and process improvement.
● Gather context about vulnerabilities to make accurate determination of severity and risk.
● Participate in refining and automating our vulnerability management workflows.
● Work with product teams to communicate identified risks, make recommendations on appropriate controls, advocate towards a fix.
● Gather and refine metrics related to vulnerability management and changes in risk posture.
Requirements
What do you know (Qualifications)
● 4+ years of experience in the cybersecurity field.
● Bachelor’s degree in a relevant field (Cybersecurity, Computer Science/Engineering, Electrical Engineering, Information Systems), or equivalent combination of experience, certification, and formal or informal education.
● Strong problem solving, troubleshooting, and communication skills.
● Tools of the trade: vulnerability scanners, code scanners (static analysis), dependency scanners (SBOM/SAST) and similar.
● General understanding of vulnerability scoring/prioritization frameworks and general cybersecurity frameworks: CVE, NIST, CIS, ISO.
Nice to have (Bonus Qualifications)
● General automation development experience.
● Experience with AWS or other public clouds and infrastructure-as-code.
Benefits
A Society Group, Inc.