The Opportunity

Procter & Gamble Corporate Functions IT, Information Security, is seeking a motivated, self-starting, and cyber security loving analyst to join our vulnerability management team. The VMS analyst will be part of a team who is responsible for maintaining a corporate-wide system that delivers reports of identified vulnerabilities, determining their criticality levels, as well as reporting on remediation progress to the relevant stakeholders. They provide guidance and support to our corporately managed IT asset management teams, asset/application owners, and business/technical leaders (BISLs/TISLs) in support of the vulnerability identification and remediation program.

This role will be to support the team that operates across the entire P&G IT ecosystem, with a key focus of identifying, categorizing, and eliminating risk to all IT assets. The role requires the ability and curiosity to learn IT security tools, manage/organize large amounts of data, and being able to assist with the communication of status and actions needed for remediation. The ideal candidate would have a combination of experience or education in cyber security, cyber intelligence, and information technology.

Job Responsibilities

Support and assist the overall VMS team goals and objectives of corporate vulnerability and risk reduction
Assist with developing, managing, and operating company-wide security vulnerability management services for IT assets, websites, mobile applications, and API scanning along with managing our corporate bug bounty program
Lead and coordinate sub-projects and proof of concepts to support the overall improvement of team capabilities
Understand the owning organizations and support models for OS, versions, patches/updates, and hardening procedures
Assist with managing VMS Service Operations, process improvements and innovations
Facilitate adoption of the solution, ensuring proper coverage and Go-to-Market Plans for new capabilities

Qualifications

Required

Bachelor’s degree in Information Systems, Information Technology (IT), Computer Science, Engineering, or other technical/IT field and/or at least 2 years of relevant experience in cyber security, cyber intelligence, or vulnerability management
An understanding of the current cyber threat and intelligence landscape and how it applies to vulnerability detection, identification, and management
Strong analytical skills with the ability to leverage complex data to identify opportunities, recognize problems, and draw logical conclusions to reduce cyber threat exposure
Familiarity with multiple operating systems including Windows and Linux, as well as understanding of network protocols and concepts
Understanding of how technical and process mitigations may impact final criticality of a vulnerability
Basic/Operational knowledge of reporting tools such as PowerBI/Excel etc.
Willingness to obtain the Certified Information System Security Professional (CISSP) certification within 18 months. P&G provides study preparation and exam cost coverage.

Preferred

Prior work experience in Information Security (government/military experience strongly preferred)
Good understanding of security vulnerabilities and vulnerability management tools such as Tenable/Qualys, Burp (Pro/Enterprise), Kryptowire, API scanning, bug bounty associated tools etc.
Experience with Kali Linux, Pentest tools, or incident response
IT Related Certifications, including but not limited to: CISSP, CISM, Network+, Cisco

Job locations

Cincinnati, Ohio, United States

Procter & Gamble

New Jobs

Threat and Vulnerability Intelligence Analyst