Senior Security Engineer, Vulnerability Management

Role Overview: The Blackbaud Cyber Security team is seeking a Senior Security Vulnerability Engineer to assist in identifying, assessing risk, and communicating vulnerability information across all Blackbaud environments. As the Senior Security Vulnerability Engineer, your primary responsibilities will include identifying infrastructure vulnerabilities and misconfigurations in both on-premises and cloud environments, validating findings, assessing associated risks, and collaborating with internal stakeholders to ensure understanding and communication of assigned risks. The Vulnerability Management team's overarching objectives involve identifying, prioritizing, and reporting risks associated with Blackbaud's network and assets, as well as driving the organization towards meeting enterprise goals in reducing the attack surface. Key Responsibilities: - Implement security controls and compensating/mitigating controls for vulnerability risks - Architect, deploy, and operationalize vulnerability scanning technology platforms and design remediation workflows - Design and implement advanced vulnerability dashboards and executive reports - Research vulnerabilities, scanning logic, and potential solutions Qualifications Required: - 5 years of Cyber Security experience - Advanced practical skills in vulnerability assessment tooling such as Crowdstrike, Tenable.io, Cisco Vulnerability Management, Qualys, Tenable CSPM, Tenable ASM, etc. - Experience with multi-cloud environments and cloud security compliance tools - Understanding of securing and hardening operating systems, applications, and containers, including frameworks providing guidance on these subjects - Experience with Kubernetes, APIs, and Web services, including REST and SOAP - Understanding of cyber security concepts, including threats, vulnerabilities, encryption, network security, and IAMS - Situational awareness around industry news on software vulnerabilities, including 0-day vulnerabilities and emergency patching - Understanding of modern security engineering concepts and security-by-design principles - Familiarity with API scripting such as Python and Bash, and an understanding of varied operation systems and network topology Additional Company Details (if present): Blackbaud is a digital-first company that embraces a flexible remote or hybrid work culture. They support hiring and career development for all roles regardless of the applicant's current location. Blackbaud prides itself on being an equal opportunity employer, committed to maintaining an inclusive work environment where all qualified applicants are considered based on their skills and experience, without regard to factors such as race, color, religion, gender, gender identity or expression, sexual orientation, national origin, physical or mental disability, age, veteran status, or any other basis protected by federal, state, or local law. Stay updated on Blackbaud by following them on LinkedIn, Instagram, Facebook, and YouTube. Role Overview: The Blackbaud Cyber Security team is seeking a Senior Security Vulnerability Engineer to assist in identifying, assessing risk, and communicating vulnerability information across all Blackbaud environments. As the Senior Security Vulnerability Engineer, your primary responsibilities will include identifying infrastructure vulnerabilities and misconfigurations in both on-premises and cloud environments, validating findings, assessing associated risks, and collaborating with internal stakeholders to ensure understanding and communication of assigned risks. The Vulnerability Management team's overarching objectives involve identifying, prioritizing, and reporting risks associated with Blackbaud's network and assets, as well as driving the organization towards meeting enterprise goals in reducing the attack surface. Key Responsibilities: - Implement security controls and compensating/mitigating controls for vulnerability risks - Architect, deploy, and operationalize vulnerability scanning technology platforms and design remediation workflows - Design and implement advanced vulnerability dashboards and executive reports - Research vulnerabilities, scanning logic, and potential solutions Qualifications Required: - 5 years of Cyber Security experience - Advanced practical skills in vulnerability assessment tooling such as Crowdstrike, Tenable.io, Cisco Vulnerability Management, Qualys, Tenable CSPM, Tenable ASM, etc. - Experience with multi-cloud environments and cloud security compliance tools - Understanding of securing and hardening operating systems, applications, and containers, including frameworks providing guidance on these subjects - Experience with Kubernetes, APIs, and Web services, including REST and SOAP - Understanding of cyber security concepts, including threats, vulnerabilities, encryption, network security, and IAMS - Situational awareness around industry news on software vulnerabilities, including 0-day vulnerabilities and emergency