Vulnerability Management Application Security Lead

Vulnerability Management Application Security Lead

Join to apply for the Vulnerability Management Application Security Lead role at Berkley Technology Services

Company URL: https://

The Vulnerability Management Application Security Lead works within Berkley’s Information Security team, interacting directly with stakeholders to address issues related to remediation of vulnerability scanning and assessment. The Vulnerability Management Analyst’s support activities are focused on helping key stakeholders understand their vulnerability results, providing guidance on the remediation of failing threats, and evaluating false positives.

Maintain and improve the existing vulnerability management program, including maintenance of documents, procedures, reporting, and stakeholder communications. Provide guidance to stakeholders in support of vulnerability management services, sharing goals and road maps. Analyze and validate scan/assessment results communicated to clients through reporting and results-review meetings. Provide remediation recommendations and guidance, up to and including remediation tracking and reporting. Provide stakeholders reports that provide the most value based on security maturity and established vulnerability management goals.

• Spearhead and enhance application security efforts, including penetration testing and static code analysis.
• Evaluate and implement improvements to security tools and explore new technologies to strengthen security posture.
• Lead projects to continuously analyze source code, identify vulnerabilities, and implement remediation strategies.
• Oversee the enterprise-wide compliance scanning process to quickly identify and address potential risks.
• Regularly update and secure buy-in from global engineering, business operating units, security management, and senior leadership teams.

• Minimum 5+ years in Information Security or a related field, with expertise in security compliance, penetration testing, vulnerability management, and static code analysis.
• Prior experience in project leadership or as a team lead is preferred.
• Bachelor’s Degree in Computer Science, Information Technology, Information Systems, or a related discipline. Equivalent experience and/or alternative qualifications will be considered.
• Skilled in commonly used penetration testing tools, web application scanning tools, and static code analysis tools (e.g., Veracode, Fortify, Checkmarx).
• Proven ability to engage and secure buy-in from business, technical, and executive stakeholders.

The Company is an equal employment opportunity employer.