Lead InfoSec Engineer at Alteryx

Job description

Meet the Moment with Alteryx We re living through a once-in-a-generation shift in how work gets done. Data, automation, and AI are quickly becoming the center of every business decision - and Alteryx is leading the transformation. You ll be working on the challenges that sit at the heart of modern business. No matter your role, the work you do will help organizations move faster, see more clearly, and tackle questions that used to feel impossible. If you re ready to meet the moment with innovation, curiosity, and excellence, there s a place for you here. Alteryx is searching for a Senior Vulnerability Management Engineer . This position is remote-friendly. Position Overview: As a Senior Vulnerability Management Engineer, you will be responsible for managing projects and initiatives focused on reducing cyber security risk associated with system vulnerabilities across the enterprise. You will assist in governing and maturing Alteryx’s vulnerability program while managing technology vulnerabilities, researching cyber incidents and effectively co-leading comprehensive investigations and other security related activities. Primary Responsibilities: Contribute to the vulnerability management process including triaging identified vulnerabilities and tracking them through the vulnerability lifecycle. Be an integral part of our vulnerability management program ensuring we are monitoring for known vulnerabilities which pose a risk to our platform Installation, monitoring, testing, troubleshooting, and administration of the vulnerability scanning tools Use our threat intelligence & vulnerability data to ensure we’re effectively responding to potential adversaries Partner with multiple engineering teams to ensure we’re effectively monitoring our cloud and container infrastructure Perform security and technical analysis of solutions, design decisions and threats Ensure scheduled scans are covering 100% of intended assets and are being run successfully Configure, optimize, and test vulnerability scans against new and existing Operating Systems and platforms Ability to develop effective communication and remediation plans for a variety of stakeholders including IT, Engineering, and Security Developing process documentation including contributions to policies and procedures Qualifications: Bachelor’s degree in Computer Science or related field or equivalent experience/training 5 years in an Information Security or IT role, preferably in red teaming, offensive security, penetration testing, reverse engineering, incident response, vulnerability management, or consulting Proficiency with enterprise vulnerability management platforms such as Tenable.io, Rapid7, Qualys, etc. Demonstrated success with Vulnerability Management program(s) or remediation efforts Strong skills in engineering and operational tools and technologies e.g., Terraform, Ansible, Git, Jenkins, Docker, Kubernetes – trying to get rid of Jenkins Knowledge about CI/CD practices and experience incorporating security requirements into a SDLC. Strong skills in critical thinking, decision making, problem solving, and attention to detail Valued Skills: Industry security certifications such as CISSP, or others Strong knowledge in major cloud environments such as AWS, GCP or Azure Alteryx is committed to fair, equitable, and transparent compensation. Final compensation is determined by several factors, including but not limited to relevant work experience, education, certifications, skills, and geographic location. The base salary range for this role in the United States is $160,000 to $185,000. This role is also eligible for a target annual bonus of 15% of base salary, based on individual and company performance. In addition to base pay and bonus eligibility, this role includes clear forms of additional compensation, such as: A monthly Connectivity Plus stipend of $150 to support remote work-related expenses An annual $200 home office reimbursement Alteryx offers a comprehensive benefits package designed to support your health, financial security, and overall well-being, including: Medical, dental, and vision coverage 401(k) with company match Paid parental leave, caregiver leave, and flexible time off Mental health support and wellness reimbursement Career development and education assistance Find yourself checking a lot of these boxes but doubting whether you should apply? At Alteryx, we support a growth mindset for our associates through all stages of their careers. If you meet some of the requirements and you share our values, we encourage you to apply. As part of our ongoing commitment to a diverse, equitable, and inclusive workplace, we’re invested in building teams with a wide variety of backgrounds, identities, and experiences. Find yourself checking a lot of these boxes but doubting whether you should apply? At Alteryx, we support a growth mindset for our associates through all stages of their careers. If you meet some of the requirements and you share our values, we encourage you to apply. As part of our ongoing commitment to a diverse, equitable, and inclusive workplace, we’re invested in building teams with a wide variety of backgrounds, identities, and experiences . Benefits & Perks: Alteryx has amazing benefits for all Associates which can be viewed here . For roles in San Francisco and Los Angeles: Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Alteryx will consider for employment qualified applicants with arrest and conviction records. This position involves access to software/technology that is subject to U.S. export controls. Any job offer made will be contingent upon the applicant’s capacity to serve in compliance with U.S. export controls.

Requirements

Must-haves

Meet the Moment with Alteryx
We re living through a once-in-a-generation shift in how work gets done. Data, automation, and AI are quickly becoming the center of every business decision - and Alteryx is leading the transformation.
You ll be working on the challenges that sit at the heart of modern business. No matter your role, the work you do will help organizations move faster, see more clearly, and tackle questions that used to feel impossible.
If you re ready to meet the moment with innovation, curiosity, and excellence, there s a place for you here.
Alteryx is searching for a Senior Vulnerability Management Engineer . This position is remote-friendly.
Contribute to the vulnerability management process including triaging identified vulnerabilities and tracking them through the vulnerability lifecycle.
Be an integral part of our vulnerability management program ensuring we are monitoring for known vulnerabilities which pose a risk to our platform
Installation, monitoring, testing, troubleshooting, and administration of the vulnerability scanning tools
Use our threat intelligence & vulnerability data to ensure we’re effectively responding to potential adversaries
Partner with multiple engineering teams to ensure we’re effectively monitoring our cloud and container infrastructure
Perform security and technical analysis of solutions, design decisions and threats
Ensure scheduled scans are covering 100% of intended assets and are being run successfully
Configure, optimize, and test vulnerability scans against new and existing Operating Systems and platforms
Ability to develop effective communication and remediation plans for a variety of stakeholders including IT, Engineering, and Security
Developing process documentation including contributions to policies and procedures
Bachelor’s degree in Computer Science or related field or equivalent experience/training
5 years in an Information Security or IT role, preferably in red teaming, offensive security, penetration testing, reverse engineering, incident response, vulnerability management, or consulting
Proficiency with enterprise vulnerability management platforms such as Tenable.io, Rapid7, Qualys, etc.
Demonstrated success with Vulnerability Management program(s) or remediation efforts
Strong skills in engineering and operational tools and technologies e.g., Terraform, Ansible, Git, Jenkins, Docker, Kubernetes – trying to get rid of Jenkins
Knowledge about CI/CD practices and experience incorporating security requirements into a SDLC.
Strong skills in critical thinking, decision making, problem solving, and attention to detail
Industry security certifications such as CISSP, or others
Strong knowledge in major cloud environments such as AWS, GCP or Azure

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aidockerkubernetesci/cdawsgcpazure

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Parental Leave

Wellness