POSITION SUMARY

As a member of the Vulnerability Detection and Management team, under Security Engineering, Vulnerability & Architecture team in Oportun’s internal Cyber organization, the Vulnerability Discovery & Management Engineer supports the DM team to discover, assess, triage and remediate vulnerabilities across Oportun’s IT systems. Engineers develop accurate and safe vulnerability detection mechanisms, and ensure continuous vulnerability lifecycle management within Oportun’s diverse environments. Your teammates are a global team of security engineers, software developers, and technical program managers dedicated to continuously raising the security bar.

By joining Oportun, the firm will invest in your personal growth in the areas of technical aptitude, leadership skills, and business acumen. Senior Engineers will work cross-functionally with business partners and key stakeholders to deliver clear recommendations and solutions that drive results.

This is an exciting opportunity in an innovative organization where your contributions will have a meaningful impact on broadening access to financial products for consumers with little or no credit history.

RESPONSIBILITIES

• Closely support and collaborate with other teams within Oportun’s cyber organization to achieve VDM objectives
• Identify and lead the appropriate measures to manage/remediate vulnerabilities and reduce potential impacts on information resources to a level acceptable to the senior management of the company
• Oversight of vendor relationships to maintain operational capabilities and resilience
• Build strong partnerships with technical teams to promote best practices for managing vulnerabilities in an agile manner and within cloud solutions
• Have the ability to understand and develop enterprise policy and technical standards with specific regard to vulnerability management and secure configuration
• Drive actionable monthly and quarterly metrics and reporting for operations and leadership transparency
• Be able to identify and assess the potential impact from vulnerabilities specific to Oportun’s environment, and determine and implement countermeasures as required

REQUIREMENTS

• Bachelor’s degree / Graduate degree from an accredited institution in a field of study related to the role OR 3+ years of progressively increasing experience with Vulnerability Management and Information security
• General knowledge of Cloud Platform administration and architecture (AWS, Azure and Kubernetes)
• General knowledge of vulnerability management or related fields such as penetration testing, or threat intelligence
• Demonstrated ability to participate in cross functional teams, including offsite, remote, and offshore resources
• Working knowledge of data analysis and related skills (SQL, BigID, PowerBI)
• Working knowledge of Vulnerability Management tools (Qualys, Tenable, Wiz, invicti, Cobalt, etc.)
• General knowledge and experience with penetration testing and other security testing tools
• Experience working in a large enterprise environment with diverse teams
• Drive to learn new things about vulnerability management, exploits, hacker techniques, and overall security operations
• Excel at prioritizing work and other demands for self and team including making risk-based decisions about remediation recommendations
• Ability to define, communicate, and execute on a vision and strategy
• Self-directed, works with minimal guidance, and recognizes when guidance needed
• Demonstrated ability to stay abreast securing evolving technology such as cloud and mobile computing

#LI-REMOTE

#LI-GK1