Information Security Engineer

Job Summary

Supporting the Enterprise Vulnerability Management Application Security team's operations, the contract Information Security Engineer IV will focus on vulnerability intake, triage, and validation activities while working remotely.

Key Responsibilities

• Review and triage vulnerability submissions, validating technical accuracy and business impact
• Assess severity and impact according to established scoring models and program standards
• Evaluate false positive requests and analyze scanner findings, performing source code reviews as needed

Required Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience
• 3-5 years of related experience in information security, application security, or vulnerability management
• Strong understanding of application security principles and common vulnerabilities
• Experience with vulnerability triage, validation, and prioritization
• Ability to communicate ideas effectively to management and technical resources