Vulnerability Management Engineer Jobs

The Team:

Our Global information security organization is responsible for security and trust. We think security-offensively and defensively. We continuously monitor our global security posture and are always adapting to the ever-changing threat landscape.

The Security Engineering team is tasked with building security into and breaking “all the things” at Celonis. Our builders are software security engineers and platform security engineers, and our breakers include red teamers as well as offensive and application security engineers. We also partner with our product and engineering teams for security by design practices and assist with triaging and remediating technical security issues.

The Role:

The Vulnerability Management Engineer will work within the Security Engineering team to enhance and ensure the continuous vulnerability lifecycle management within Celonis’ diverse environments. This role will work within a team of Vulnerability Management Engineers in the collection, monitoring, reporting, and impact assessment for vulnerability related data from partners, vendors, and internal intelligence sources. This individual will lead by building bridges and forming relationships with the technical teams within Celonis, to support strategies and controls for vulnerabilities within these environments.

The work you’ll do:

• Serve as subject matter expert related to vulnerability management and secure configuration
• Enhance the current Vulnerability Management strategy and process for Celonis
• Providing mentorship, coaching, performance management and support to team members with regard to vulnerability assessment, communication/rapport with other divisions and various levels of leadership, technical expertise, and career development
• Build strong partnerships with technical teams to promote best practices for managing vulnerabilities in an agile manner and within cloud solutions
• Be able to identify and assess the potential impact from vulnerabilities specific to Celonis’ environment, and determine and implement mitigating controls
• Act as a champion for vulnerability management and information security including broadening awareness and use of the team’s services, education of security best practices and integration with other business areas
• Oversight of onboard and offboard resources
• Have the ability to understand and develop enterprise policy and technical standards with specific regard to vulnerability management and secure configuration
• Provide prompt attention and visibility into risks, vulnerabilities, and issues serving as an escalation path for team member effectiveness
• Identify and lead the appropriate measures to manage/remediate vulnerabilities and reduce potential impacts on information resources to a level acceptable to the senior management of the company
• Drive actionable metrics and reporting for operations and leadership transparency
• Closely support and collaborate with Celonis’ Security Engineering and Trust teams

The qualifications you need:

• Advanced experience with vulnerability scanning tools and other security testing tools
• Understanding of attacker mindset, exploitation, and how vulnerabilities are leveraged
• Experience in vulnerability management or related field such as penetration testing, SOC, or threat intelligence
• Experience working in very large enterprise environment with diverse teams
• Excel at prioritizing work and other demands for self and team including making risk-based decisions about remediation recommendations
• Ability to define, communicate and execute on a vision and strategy
• Familiar with industry standard security best practices and vulnerability management processes including compliance reporting
• Demonstrated ability to participate in cross functional teams, including offsite, remote and offshore resources
• Drive to learn new things about vulnerability management, exploits, hacker techniques, and overall security operations
• Demonstrated ability to stay abreast securing evolving technology such as cloud and mobile computing
• Self-directed, works with minimal guidance, and recognizes when guidance needed
• Ability to effectively communicate with technical and non-technical resources

What Celonis can offer you:

• Investment in your personal growth and skill development (clear career paths, internal mobility opportunities, mentorships, yearly development stipend)
• Employee resource communities to help you feel connected, valued and seen (Women@Celonis, Parents@Celonis, Pride@Celonis, Resilience@Celonis, and more)
• Great compensation and benefits packages (stock options, 401(K) matching, generous time off, parental leave, and more)
• A global and growing team of Celonauts from diverse backgrounds to learn from and work with
• A clear set of company values that guide everything we do: Live for Customer Value, The Best Team Wins, We Own It, and Earth Is Our Future
• Work from home support (mindfulness tools such as Headspace, monthly remote working stipend, flexible working hours, virtual events and workshops)
• The unique opportunity to work within a new category of technology, Execution Management
• An open-minded culture with innovative, autonomous teams