Security Vulnerability Management Specialist

:

Arconic is currently in search of a Security Vulnerability Management Specialist to join our Corporate Information Security Team in Pittsburgh, PA .

At Arconic, we are looking for people who share our values of integrity, inclusion, and diversity, and who demonstrate agility, results commitment, and the capability to grow themselves and others. In return, we offer the opportunity to Grow Together with ongoing opportunities for professional growth provided by a constantly changing environment, working alongside employees who value the people they work with just as much as the work they do.

Primary Responsibilities

• Partner with security architects and key stakeholders to identify and reduce risk introduced by software and configuration vulnerabilities
• Identify, report and track system vulnerabilities of company IT assets ensuring the integrity of the environment
• Perform risk analysis and prioritization of findings identified by vulnerability management solutions
• Oversee vulnerability remediation targets to ensure fixes are applied timely, in accordance with Arconic standards
• Collaborate with partners to anticipate potential non-compliance with remediation timelines, and escalate non-compliance to appropriate individuals, as necessary
• Operate with Arconic IS standards and conventions and applicable Arconic BU/RU IT Standards

Key Objectives

• Lead the Arconic vulnerability management track
• Manage and administer Arconic enterprise vulnerability assessment technology platforms
• Design and execute a master scanning schedule for Arconic assets, globally
• Inform business stakeholders on vulnerability risk via the Arconic enterprise data visualization platform

Basic Qualifications

• Working and practical knowledge of security tools, techniques, countermeasures and trends in application, network, system threats and vulnerabilities
• Bachelor's degree from an accredited institution.
• Minimum 3 years of experience in enterprise IT applications, infrastructure, security, or other related fields
• Employees must be legally authorized to work in the United States. Verification of employment eligibility will be required at the time of hire. Visa sponsorship is not available for this position.
This position is subject to the International Traffic in Arms Regulations (ITAR) which requires U.S. person status. ITAR defines U.S> person as a U.S> citizen, U.S> Permanent Resident (i.e. ‘Green Card Holder), Political Asylee, or Refugee.

Preferred Qualifications

• Experience with leading vulnerability scanning tools (Rapid7, Tenable, InsightVM, etc.)
• Direct hands-on experience or strong working knowledge of vulnerability scanners and reviewing vulnerabilities
• Experience with leading data visualization platforms (Tableau, PowerBI, etc.)
• Active security certification (ISACA, ISC2, CompTIA etc.), is a plus
• Master's degree from an accredited institution