Job summary
The Hardware Vulnerability Engineer will be an integral part of the Cloud Hardware Organization and closely partner with other Cloud and Security teams.This role will require a deep technical understanding of security and the ability to understand ServiceNow architecture with a focus on the remediation of hardware specific vulnerabilities for server and storage devices.Work with Security and Cloud teams to review, monitor, triage, and remediate vulnerabilities with a focus on server and storage hardware, along with PDU and other out-of-band devices
Job seniority: mid-to-senior level
Responsibilities
• Review, monitor, triage, and remediate vulnerabilities with a focus on server and storage hardware, along with PDU and other out-of-band devices• Partner with stakeholders to drive down vulnerabilities, develop long-term mitigation strategies• Assist with large-scale deployments across ServiceNow's global cloud environment to meet our strict security and compliance standards• Generate metrics and reporting to show the program and performance against SLAs• Work directly with vendors (Dell, Raritan, Pure Storage, etc.)
Requirements
• 2+ years of relevant experience in cybersecurity and vulnerability management• 6+ years supporting enterprise hardware at scale, including low-level firmware deployment• 6+ years working in Linux in large scale environments, including Linux security features• Excellent written and verbal communication skills, requiring direct communication with external vendors and senior leadership• Experience with vulnerability management tools, a strong technical understanding and experience assessing vulnerabilities for server hardware, storage devices, and out-of-band management devices• A strong team player who is proactive and driven to achieve results• Industry certifications or training and experience (CISSP, CCSP or relevant GIAC) certifications are a plus• Linux scripting experience, including development of automation tools, information gathering scripts, and monitoring scripts a plus• Experience with ServiceNow Platform a plus