Senior Technical Analyst Vulnerability and Exposure Management

Senior Technical Analyst Vulnerability and Exposure Management - News Corp

SENIOR TECHNICAL ANALYST, VULNERABILITY AND EXPOSURE MANAGEMENT

About News Corp:

News Corp is a global diversified media and information services company focused on creating and distributing authoritative and engaging content to consumers and businesses throughout the world. The company comprises businesses across a range of media, including: news and information services, book publishing, digital real estate services, cable network programming as well as pay-tv distribution in Australia.

What You'll Do

Research, report and guide on security vulnerabilities, advancements, and remediations. Collaborate and coordinate with team members, partners, and relevant businesses within the News Corp community.

Responsibilities

1. Provide technical guidance to remediation teams and asset owners.
2. Identify false and true positive alerts and investigate their implications.
3. Provide recommendations to improve the effectiveness of the scanning tool to reduce future false positive alerts.
4. Serve as the technical SME (Subject Matter Expert) for Vulnerability Management and related tools/applications.
5. Identify, recommend and automate vulnerability management tasks.
6. Ensure scanning coverage is sufficient for risk visibility and remediation.
7. Support business with Vulnerability Management prioritisation.
8. Understand and work with scan results from multiple source platforms.
9. Understand the current state of the components in the IT stack ranging from networking, storage, compute (virtualization, containers), applications & security management.
10. Collaborate to understand the threats, vulnerabilities, and risks to the enterprise.
11. Develop measurements of findings to produce meaningful and business-friendly metrics to track program performance and effectiveness.
12. Prepare reports for customers to help with their remediation efforts, understanding of risk and SLA compliance requirements.
13. Collaborate with cybersecurity partners to understand the criticality of exposure from intelligence gathering activities.
14. Contribute and improve the Vulnerability and Exposure Management Program and NIST coverage.
15. Train and mentor junior engineers.

Required Experience & Qualifications

1. Strong analytical skills with high attention to detail and accuracy.
2. Able to work effectively, as well as independently, in a team environment.
3. Working knowledge with one or more Cloud Service Providers (AWS, GCP, Azure).
4. Industry Certifications (CISSP, CCSP, Security+).
5. Excellent verbal, written, and interpersonal communication skills.
6. Experience and comfortability working with Python and SQL.
7. Experience working in a large enterprise environment.
8. Strong organisational, multi-tasking, and prioritising skills.
9. Able to meet time-sensitive deadlines required.
10. Able to handle confidential material according to company policies and standards.
11. Able to transform complex data into meaningful action and presentations.
12. Basic knowledge and experience in administering IT components (systems, networks, servers, and cloud-related components).

Desired Qualifications

1. View learning as an ongoing process, not just something you do in school.
2. Actively seek out new information and perspectives on various topics.
3. Continuously evaluate your learning progress and adjust your approach as needed.

Location:

On-Site London