Note: The job is a remote job and is open to candidates in USA. Progressive Insurance is seeking a Senior Information Security Analyst focused on vulnerability management. The role manages vulnerability scanning and penetration testing programs, reports findings, prioritizes risks, and identifies enterprise security improvements. The analyst also provides security consulting, supports enterprise projects, and advocates for security enhancements.
Responsibilities
- Conduct internal/external vulnerability scans
- Manage the penetration testing program
- Report findings to stakeholders
- Rank/prioritize risk and identify potential areas of security improvements across the enterprise
- Serve as a subject matter expert in vulnerability management for enterprise projects
- Providing security consulting
- Ensuring the implementation of approved security requirements in accordance with Progressive’s enterprise security and standards and service level agreements
- Advocating for security enhancements and improvements throughout the enterprise
Skills
- A minimum of eight years related work experience
- {OR} Bachelor's degree and a minimum of five years relevant work experience
- {OR} Master's degree or higher and a minimum of three years relevant work experience
- This is a remote position for US based work only
- Applicants must be authorized to work for any employer in the U.S. without the need or potential need, of current or future sponsorship for employment
- Experience using vulnerability management tools such as Qualys/Tenable/Wiz, SIEM platforms, enterprise ticketing platforms, e.g. ServiceNow, BMC Helix
- Experience with risk-based prioritization with the ability to prioritize vulnerabilities using CVSS, EPSS, CISA KEV, CVE/CWE, threat intelligence and business impact
- Experience with remediation management, ensuring SLAs are being achieved, tracking aging vulnerabilities and working with technology teams on remediation plans
- Experience in penetration testing with the ability to interpret penetration test findings and integrate them into the broader vulnerability management program
- Experience with automation with experience using APIs, scripting, workflows, GRC platform and to improve vulnerability and remediation
Benefits
- Gainshare annual cash incentive payment up to 30% of your eligible earnings based on company performance
- 401(k) with dollar-for-dollar company match up to 6%
- Medical, dental & vision, including free preventative care
- Wellness & mental health programs
- Health care flexible spending accounts, health savings accounts, & life insurance
- Paid time off, including volunteer time off
- Paid & unpaid sick leave where applicable, as well as short & long-term disability
- Parental & family leave; military leave & pay
- Diverse, inclusive & welcoming culture with Employee Resource Groups
- Career development & tuition assistance
- Onsite gym & healthcare at large locations
- Remote position for US based work only
Company Overview