AAA Northern California, Nevada & Utah: Cyber Security Vulnerability Engineer

We call our club’s vision, mission, values, and supporting pillars ” Our House” because they are the foundation for all that we do.

We’re working to transform AAA for the next century with a mission to create Members for life by unleashing the innovative spirit of our Team Members.At AAA, our Team Members strive to deliver amazing service and help our Members outsmart life’s roadblocks.

We believe everything you do outside of work adds to who you are at work.

We’re working to transform AAA for the next century with a mission to create Members for life by unleashing the innovative spirit of our Team Members.

Why Work For Us?Benefits Medical, Dental, Vision, wellness program and more401k Matching $1 for $1 company match up to 6% of payAnnual Incentive Plan Eligibility to participate in AAA NCNU annual bonus planPaid Time Off Team Members accrue paid time off monthly with an additional 24 hours per year earmarked for volunteer activitiesCollaborative Environment AAA will value your contribution to providing exceptional service to our membersOur Cybersecurity Vulnerability Engineer will perform penetration tests following a systematic process to assess the ability of systems to withstand sophisticated adversaries who have knowledge of the AAA architecture and systems.

This includes exploitation of configurations and pathways and interactions between systems that mimics the techniques employed by advanced adversaries.

Your efforts will measure the effectiveness of our defense-in-depth architecture against known vulnerabilities.This position conducts assessments of threats and tracks AAA vulnerabilities; determines deviations from acceptable configurations, enterprise or local policy; assesses the level of risk; and develops and/or recommends appropriate mitigation countermeasures in operational and nonoperational situations.Essential FunctionsConduct penetration testing and vulnerability assessment scans, exposing security vulnerabilities and risks, and recommending solutions to mitigate such vulnerabilities.Track public and privately released vulnerabilities and assist in the mitigation process including identification, criticality evaluation, remediation, planning, communications, and resolution.Conduct security assessments of across the environment from locally hosted servers to cloud hosted web-based applications.Work with the HUNT team to search for evidence of compromise.Work with the team for Incident Response.Knowledge and SkillsKnowledge of secure configuration and hardening of systems.Ability to interpret, prioritize, and incorporate vulnerability scans results into remediation actions and tracking those actions through to completion.Ability to code custom tools or scripts to enumerate or exploit systems is a plus.Understanding of the risks associated with penetration testing and vulnerability scanning.Candidate must be knowledgeable about likely attack vectors and adversary techniques.Excellent problem solving, critical thinking, and analytical skills ability to de-construct problems, figure out how things work, and propose countermeasures.Candidate must also have the ability to effectively communicate risks and advise on the implementation of security protectionsEducation and ExperienceBachelor’s degree or equivalent experience in cyber security or a challenging field of study.Advanced degree and/or advanced raining is a plus.Experience developing and administering am enterprise vulnerability management program.Experience in penetration testing of internal and external assets including (but not limited to) networks and servers, web applications, and physical structures.LI-VB1VIC_RX

Related Post