Lead InfoSec Engineer

Position overview

Primary responsibilities

• Triage vulnerabilities and track them through the vulnerability lifecycle; monitor known platform risks.
• Install, monitor, test, troubleshoot, and administer vulnerability scanning tools.
• Use threat intelligence and vulnerability data to respond to potential adversaries.
• Partner with engineering teams to monitor cloud and container infrastructure.
• Analyze solutions, design decisions, and threats from security and technical perspectives.
• Ensure scans cover intended assets and run successfully; configure and test scans on operating systems and platforms.
• Develop remediation plans, stakeholder communications, process documentation, policies, and procedures.

Qualifications

• Bachelor’s degree in Computer Science or related field, or equivalent experience or training.
• 5+ years in Information Security or IT; listed relevant backgrounds include red teaming, offensive security, penetration testing, reverse engineering, incident response, vulnerability management, and consulting.
• Proficiency with enterprise vulnerability management platforms such as Tenable.io, Rapid7, or Qualys.
• Demonstrated success with vulnerability management programs or remediation efforts.
• Strong skills with engineering and operational tools such as Terraform, Ansible, Git, Jenkins, Docker, or Kubernetes.
• Knowledge of CI/CD practices and experience incorporating security requirements into an SDLC.
• Strong critical thinking, decision-making, problem-solving, and attention to detail.

Valued skills

• Industry security certifications such as CISSP and strong knowledge of AWS, GCP, or Azure are valued.

Benefits

• Benefits are available to Alteryx associates; the posting refers candidates to the company benefits page.

Additional role information