What you'll do...
Position: Senior Risk Expert
Job Location: 811 Excellence Dr, Bentonville, AR 72716
Duties: Assesses the security compliance of applications and infrastructure against risk and security standards. Identifies lapses in organizational risk and security protocols. Develops action plans aligned with corporate risk and security policies, standards, and guidelines. Evaluates technologies and tools that address security gaps. Supports the implementation of security controls in alignment with corporate frameworks. Ensures adherence to security guidelines and protocols. Reviews the adequacy of security controls. Identifies improvement areas and proposes updates to risk and security guidelines. Participates in penetration testing using a range of tools and techniques. Demonstrates awareness of system components and supports issue remediation. Uses network monitoring and vulnerability scanning tools to assess threats and vulnerabilities. Identifies exploit paths and potential attack vectors. Analyzes scan results to evaluate security risks and system vulnerabilities. Conducts independent assessments of weaknesses identified through threat modeling and secure code reviews. Recommends actions to remediate or prevent vulnerabilities. Performs authorized penetration testing using various methodologies and tools. Utilizes network monitoring and scanning tools to identify threats. Assesses exploit risks and assists with remediation strategies. Analyzes vulnerability scan data to identify and evaluate security gaps. Evaluates current security controls against standards. Communicates assessment results and testing reports. Highlights critical threats and recommends improvements. Assesses emerging hacking techniques and risks to systems. Identifies and analyzes network security threats and vulnerabilities. Proposes recommendations to address deficiencies. Implements perimeter security, network hardening measures, and user account controls based on asset security requirements. Designs and conducts testing to validate network security performance. Debugs network security based on test outcomes. Reviews logs and audit reports to document incidents, intrusions, and attempts. Reviews multiple intelligence sources to identify potential cyber threats. Summarizes findings for key stakeholders. Provides recommendations aligned with business needs. Conducts all-source analysis to evaluate threat actors, methods, motives, and capabilities. Reports threat intelligence based on network defense methodologies and accepted analysis standards.
Minimum education and experience required: Master's degree or the equivalent in Computer Science or a related field plus 1 year of experience in cybersecurity risk or a related field; OR Bachelor's degree or the equivalent in Computer Science or a related field plus 3 years of experience in cybersecurity risk or a related field.
Skills required:Must have experience with: Developing and applying cyber risk assessments to identify and mitigate security gaps and threats in a dynamic cyber security environment; Implementing and improving security compliance through risk analysis, action plans, and technology evaluations in line with corporate risk and security policies; Security assessment and testing involve using tools and methodologies to identify and mitigate system vulnerabilities and threats; Vulnerability assessment tools, penetration testing, and threat modeling in identifying system weaknesses and enhancing security against potential cyber threats; Analyzing and assessing network security policy and controls, including analyzing threats, implementing solutions, and reviewing incidents, using knowledge of VPNs, protocols, encryption, and organizational requirements; Utilizing Threat Research, Intelligence and Analysis frameworks, cyberattack techniques, and operations security to identify potential threats, gather data, and communicate findings effectively; Audit and Control requires understanding of methodologies, non-compliance issues, regulatory guidelines, and emerging technologies to recognize requirements, describe policies, understand activities, and participate in related initiatives; Managing Functional Partnerships including understanding stakeholders, their needs, and cultural differences, to maintain relationships, exchange information, provide expert advice, support business solutions, model company compliance, coordinate activities, and provide supervision and development opportunities, all while ensuring continuous learning and diversity awareness. Employer will accept any amount of experience with the required skills.
Rate of pay: $90,000.00 - 180,000.00/year