Senior Threat and Vulnerability Management Engineer

Senior Threat and Vulnerability Management Engineer

Job Type: Full-Time

Salary Range: $105,074 - $125,000

We Provide

• Full benefits package for full-time employees
• Retirement savings plan
• Exciting, supportive and fun work environment
• Family and friends discounts on travel, tech, food, beverage, and fitness
• Development and training opportunities

The Position

The incumbent will be responsible for guiding technical teams of cyber security technical specialists to ensure risk reduction is achieved while abiding cyber security standards. Provide support and guide the maintenance of cyber solutions ensuring the protection and integrity of Gateway corporate and Gaming Management Systems (GMS). They will ensure that cyber threat intelligence is consistently woven into the fabric of our threat & vulnerability management program;

managing the backbone of the cyber program growth must be always maintained in accordance with established standards.

Key Responsibilities

• Oversee and maintain the overall Enterprise Risk management program by ensuring that security and compliance risks are mitigated and is responsible for protecting data from compromise
• Maintain active situational awareness of the threat landscape by consistently evaluating cyber threat intelligence and communicating critical updates to cyber leadership
• Provide technical leadership within CTI-driven initiatives to further address attack surface management risks with peers across our industry vertical
• Responsible for analyzing, developing, implementing and enforcing security, privacy and data protection requirements, policies and corporate technical guidelines
• Provide technical guidance among cross functional groups to ensure compliance with gaming standards and Gateway requirements as across multiple sites and lines of businesses
• Guide and mentor a high-performance team of Cyber Security Professionals by providing technical expertise to their growth and development
• Initiate, facilitate and promote activities to increase the level of information protection awareness within the company
• Lead threat management related initiatives and implements process and methods to raise the maturity of security governance and execution within the company while improving the security of information assets
• Oversee ongoing evaluation of vulnerability assessment measures, identifying any threats and making recommendations to reduce exposure
• Ensure systems, applications, and client programs are designed in accordance with data protection policies, guidelines, and standards
• Manage and investigate security related incidents and conduct threat risk assessments
• Oversee in the implementation of risk reduction controls
• Act as a technical trusted leader advising cyber leadership, representative for all security and/or business continuity audits, reviews, certifications or inquiries with internal and external clients
• Manage the maintenance of documentation on information protection practices, policies and procedures
• Lead ongoing tuning of data protection and cyber security technologies as a trusted technical expert
• Review new business opportunities to ensure proper privacy/security/business continuity requirements are appropriate, and adequately captured
• Work with leadership to ensure all SOP documentation is up to date. Accountable for the accuracy of procedural efficiency and documentation relating to the application or cyber services
• Partner with peers in other departments to implement security and overall compliance initiatives
• Some travels maybe required
• Overtime work as required
• Other duties as required

What You Bring

• Bachelor’s degree in Technology, Computer Science or equivalent
• CISSP, CISM, CISA, GSEC, CEH, GCIH are considered an asset
• 7+ years of experience leading a Cyber security team function, cyber security support/solution delivery team preferably in a casino or gaming and entertainment industry or other large enterprise environment
• 7+ years’ experience in a hands‑on role leading implementation and supporting cyber security initiatives with focus on business application systems
• Experience in leading DR runbook and execution in a mission‑critical high availability environment preferred
• Experienc…