Description:

Granicus is seeking a Security Engineer to manage and improve the operations of existing security tools, including Vulnerability Management, Threat Intelligence, and Endpoint Detection and Response.
The role involves running vulnerability (SAST) and application (DAST) scans accurately and on a timely basis.
The Security Engineer will work with Compliance colleagues to accurately document and track vulnerabilities and remediation efforts.
Responsibilities include managing the lifecycle of organizational security tools and helping technical teams determine application risks related to privileged access on endpoints.
The engineer will act as a security representative during incidents and review proposed changes for potential security issues.
Participation in an on-call rotation is required to ensure 24x7 escalation support for incidents.
The position ensures the confidentiality, integrity, and availability of information assets.

Requirements:

A passion for understanding the who, what, when, and why of security situations is essential.
Attention to detail is necessary to ensure accurate vulnerability management operations.
Direct experience in systems administration, application development, database administration, network operations, or data center operations is required.
The ability to continuously learn new methods and technologies and identify gaps that should be addressed is important.
Experience in a common scripting language like Python or Powershell is needed.
Familiarity with running a vulnerability management process using technologies like Nessus is required.
Understanding of Infrastructure as a Service (IaaS) cloud platforms, such as IAM, compute (EC2), networking (VPC, Load Balancers), serverless (Lambda), and Containers (EKS), is necessary to identify and prioritize potential security challenges.
Familiarity with IDS/IPS, SIEM, DLP, firewalls, vulnerability management systems, and endpoint security products, including management and configuration of the tools, is required.
The ability to write technical Standard Operating Procedures (SOPs) and train team members is essential.

Granicus promotes a diverse and inclusive work environment and encourages applicants who may not meet all requirements to apply.
The company offers a remote-first work culture with a globally distributed workforce.
Employees have access to Employee Resource Groups to encourage diverse voices and participate in wellness-focused Microsoft Teams communities.
The company hosts sessions like "Coffee with Mark," allowing employees to interact with the CEO on important issues.
Granicus is committed to providing equal employment opportunities and values diversity in its workforce.