Vulnerability Management Engineer - Tranzeal Incorporated.
Newark CA
About the Job
Requisition #367022
Job Title: Vulnerability Management Engineer
Start Date: 12-04-2023
End Date: 05-04-2024
Hiring Manager: Ravi Tamilarasan
Max Bill Rate: $150/hr
Pay Rate:<$107.14/hr
Location: Newark,CA
# of Positions: 1
Position Details: Vertical Engineering & IT
Description
-Change Request Analysis: Understand and evaluate change requests for vehicle systems to assess their security implications.
-Security Impact Analysis: Conduct a comprehensive security impact and risk analysis for proposed changes and new features.
-Change Tracking: Keep track of all feature, bug fix, and release changes for each automotive system release.
-CVE Tracking: Monitor and track CVE (Common Vulnerabilities and Exposures) analysis, ensuring timely identification and assessment of vulnerabilities.
Component Identification: Identify and document the specific components and systems impacted by proposed changes.
-Security Assessment Planning: Develop security assessment plans for new changes, ensuring that they align with industry best practices and compliance requirements.
-Regression Testing: Collaborate with the automation team to create and maintain security automation scripts for regression security validation.
-Vulnerability Scanning: Conduct regular vulnerability scans and assessments of automotive systems to identify and prioritize vulnerabilities.
-Documentation: Maintain detailed records of vulnerability assessments, findings, and remediation actions.
-Domain Expertise:
Demonstrate a clear understanding of security testing activities across different domains, including network security, rich OS systems like Linux and Android, RTOS, wireless, and hardware.
Requirements
Job Title: Vulnerability Management Engineer
Start Date: 12-04-2023
End Date: 05-04-2024
Hiring Manager: Ravi Tamilarasan
Max Bill Rate: $150/hr
Pay Rate:<$107.14/hr
Location: Newark,CA
# of Positions: 1
Position Details: Vertical Engineering & IT
Description
-Change Request Analysis: Understand and evaluate change requests for vehicle systems to assess their security implications.
-Security Impact Analysis: Conduct a comprehensive security impact and risk analysis for proposed changes and new features.
-Change Tracking: Keep track of all feature, bug fix, and release changes for each automotive system release.
-CVE Tracking: Monitor and track CVE (Common Vulnerabilities and Exposures) analysis, ensuring timely identification and assessment of vulnerabilities.
Component Identification: Identify and document the specific components and systems impacted by proposed changes.
-Security Assessment Planning: Develop security assessment plans for new changes, ensuring that they align with industry best practices and compliance requirements.
-Regression Testing: Collaborate with the automation team to create and maintain security automation scripts for regression security validation.
-Vulnerability Scanning: Conduct regular vulnerability scans and assessments of automotive systems to identify and prioritize vulnerabilities.
-Documentation: Maintain detailed records of vulnerability assessments, findings, and remediation actions.
-Domain Expertise:
Demonstrate a clear understanding of security testing activities across different domains, including network security, rich OS systems like Linux and Android, RTOS, wireless, and hardware.
Requirements
- Bachelor's degree in Computer Science, Cybersecurity 8+ years related experience
- Proven experience in automotive vulnerability management or cybersecurity.
- Strong understanding of automotive systems, network protocols, and security principles.
- Knowledge of industry standards and regulations related to automotive security (ISO/SAE 21434, UNECE WP.29, etc.).
- Proficiency in vulnerability assessment and methodologies.
- Excellent problem-solving and analytical skills.
- Ability to work collaboratively in a cross-functional team environment.
- Experience with scripting and automation
- Solid experience with embedded systems, automotive systems, and security testing in various domains.
Source : Tranzeal Incorporated.