Description
GSK is looking for a Senior Engineer, Threat Exposure Management to join their team.
The role involves delivering assigned work to agreed quality and timelines, supporting colleagues with peer review and knowledge sharing, maintaining a continuous view of GSK's threat exposure across vulnerabilities, external attack surface, configuration drift and control coverage.
The ideal candidate will have a degree in a relevant discipline, demonstrated experience in vulnerability or exposure management, working knowledge of risk-based prioritisation of technical findings, practical hands-on experience in the relevant cyber security domain, and strong attention to detail in analysis and documentation.
Preferred qualifications include experience with continuous threat exposure management practice, enterprise vulnerability and attack surface tooling, familiarity with EPSS and the CISA Known Exploited Vulnerabilities catalogue, data visualization skill in Power BI, relevant certification such as CISSP, CompTIA Security+, GIAC, CRISC, and experience in pharmaceutical, life sciences or another highly regulated industry.
The typical tools and technologies used are Qualys, Tenable, Rapid7, external attack surface management tooling, CSPM, ServiceNow, Power BI.
GSK offers a range of benefits to support their employees.