Vulnerability Management Engineer (Hybrid)

Join a team of cybersecurity professionals and help Swiss Re to fulfil its mission in making the world more resilient. As the Vulnerability Management Engineer, you will be building and engineering software solutions to advance our cybersecurity capabilities and our own resilience. What's more, you'll be working in a flexible setup, perfectly balancing work from home and the office premises. 

About the team

The Security Team is the focal point for all security activities across Swiss Re. We are responsible for cybersecurity engineering and operations, governance, risk and compliance. We define and advance the company's security strategy. As a part of the Security Team, the Vulnerability Management Engineering team owns and develops applications and tools for vulnerability management, penetration testing, and Red Teaming.
 
We are looking for an engineer who'll help us to integrate vulnerability sensors, process vulnerability data and improve our security operations through automation.

In your role, you will…

• Improve Swiss Re's cyber defense posture by integrating vulnerability information from different sources and enriching it with contextual information.
• Engineer solutions in a modern, API-driven multi-cloud environment.
• Deploy, configure, operationalize and maintain infrastructure and SSDLC (SAST, DAST, IaC, SBOM, SCA and Supply chain) related vulnerability scanning solutions.
• Work with QA experts and Software developers to ensure our solutions and integrations meet high expectations for reliability and availability.
• Have a chance to learn more about information security, vulnerability management, and Identity & Access Management.
• Act as part of an agile team (Scrum).

Your qualifications

Nobody is perfect and meets 100% of our requirements. If you, however, meet some of the criteria below and are curious about the world of vulnerability management inside a well-established cybersecurity infrastructure, we'll be more than happy to meet you!

What we need from you

• Passion, drive, and a belief in the value of vulnerability management as an enabler of business performance.
• Familiarity with vulnerability scoring methods, vulnerability management tools (Qualys preferred) and processes.
• Hands-on experience with infrastructure and SSDLC (SAST, DAST, IaC, SBOM, SCA and Supply chain) related vulnerability scanning solutions.
• Fundamental knowledge of cybersecurity concepts and DevSecOps tools.
• Knowledge of a major public cloud ecosystem (Microsoft Azure preferred).
• Excellent oral and written communication skills (English).

Nice-to-have

• Knowledge of Azure security tooling.
• Experience with infrastructure-as-code technologies.
• Experience with agile development and DevOps.
• Experience building integrations to existing systems.
• Experience with managing tools for SAST and DAST scanning.
• Knowledge about vulnerability exploitation
• Proficiency in RESTful based applications, cloud technologies, containers.

Who is Swiss Re?

As the world's leading and most diversified global reinsurer, we offer as our core business financial services products that enable risk taking essential to enterprise and progress. Our company was founded in Zurich, Switzerland in 1863, and operates in more than 25 countries and provides its expertise and services to clients throughout the world. We combine financial strengths with experience, knowledge, and creative thought to explore new opportunities in the interests of our clients, staff, and shareholders.

We are an equal opportunity employer, and we value diversity at our company. Our aim is to live visible and invisible diversity – diversity of age, race, ethnicity, nationality, gender, gender identity, sexual orientation, religious beliefs, physical abilities, personalities, and experiences – at all levels and in all functions and regions. We also collaborate in a flexible working environment, providing you with a compelling degree of autonomy to decide how, when, and where to carry out your tasks.

We provide feedback to all candidates via email. If you have not heard back from us, please check your spam folder.
 

#Li-hybrid