senior vulnerability Management analystCiena

Since 1992, Ciena has been driven by a relentless pursuit of network innovation. We believe in a network that grows smarter, more agile, and more responsive every day. This means that when you digitally interact in your world - picking up the phone, streaming video, texting a friend or loved one - your interactions are being enabled by Ciena technologies. Ciena makes your social / entertainment / business existence REAL.
No candidate will meet every single desired qualification. If your experience looks a little different from what we've identified below and you think you can bring value to the role, we'd love to learn more about you!
Your Role
Ciena is seeking a Vulnerability Management, Analyst to join our cybersecurity remediation organization. We're looking for a highly motivated and talented analyst with a passion for Vulnerability Management. The ideal candidate will have experience supporting and managing vulnerability management activities in large enterprise environments. The role will lead key vulnerability management initiatives that will minimize security weaknesses in the environment by working with the Cybersecurity, IT Infrastructure, and Application teams to drive vulnerability remediation across the enterprise.
Your Responsibilities
Contribute to the design and implementation of our vulnerability management program that leverages a risk-based approach to address current vulnerabilities for the most impactful asset categories.
Provide structured guidelines to help evaluate, prioritize, and secure Ciena's systems and applications.
Prioritize asset categories over a short and long-term program roadmap that delivers timely scans, actionable reporting, and continuous process improvement for vulnerability remediations.
Execute application and system vulnerability management processes and outcomes to ensure proactive discovery and remediation of risks.
Maintain patch and vulnerability management best practices to protect against the exploitation of critical application and system vulnerabilities.
Effectively communicate security vulnerabilities and risks to issue owners and assists in remediation efforts.
Analyze vulnerability data to determine broad issues/trends and to determine root cause problems.
Research, design, and implement solutions to address the root cause of problems on behalf of the enterprise.
Participate in the Cybersecurity Incident Response Team (CIRT) investigation and response activities as required.
Apply risk treatment to vulnerabilities that cannot be remediated through business-as usual (e.g., systems that cannot be updated per regulatory restrictions, systems that require significant technology upgrades, etc.)
Continuous engagement and feedback loop with application and asset owners to assess technology assets for vulnerability remediation and influence investment in modernization.
Facilitate routine vulnerability management review meetings with stakeholders to drive remediation efforts.
Serve as a subject matter expert on application and system vulnerabilities and threat management.
Utilize and enforce the utilization of cybersecurity and vulnerability management procedures, tools, and internal reporting/tracking mechanisms.
Participate in the development and maintenance of executive and team dashboards and/or regular reports to communicate department-specific cybersecurity risks and threats.
Demonstrate in-depth knowledge and understanding of the global threat landscape, cybersecurity trends, emerging technologies, and the ability to relate them to the IT teams and application developers.
May also participate in the evaluation and implementation of other new security solutions and technologies.
Apply knowledge of operating systems, applications, and database vulnerability assessments (to include system configuration checks) on various Information Systems.
Conduct research on current vulnerabilities and exploits using publicly available, trusted resources, and other finished vulnerability products.
Implement and utilize a combination of automated tools and manual checks to identify and validate application and system vulnerabilities.
Minimum qualifications
Progressive work experience in both system and application vulnerability management to include vulnerabilities in code, such as SQL injection or cross site-scripting (XSS) opportunities. Insecure or misconfigured settings, such as weak access controls or passwords, insufficient authentication, and authorization mechanisms.
3+ years' experience in a vulnerability management role working with a vulnerability management platform as an administrator.
4+ years' experience working knowledge of Information Security best practices, policies, standards, and baselines, including industry standards and guidelines from ISO 27001/27002, NIST, CIS, and OWASP
5+ years' technical working experience/knowledge of operating systems, databases, web applications, middleware, and other computing devices/software components
Bachelor's degree in Information Security, Computer Science, or equivalent experience.
5 years of experience in computer software or computer networking.
Security certifications preferred (e.g., Security+, GCIA, GCIH, CISSP, CEH, CCSP, etc.).
#LI-SM
At Ciena, we are committed to building and fostering an environment in which our employees feel respected, valued, and heard. Ciena values the diversity of its workforce and respects its employees as individuals. We do not tolerate any form of discrimination.
If contacted in relation to a job opportunity, please advise Ciena of any accommodation measures you may require.
Ciena

Makati City, Metro Manila
Permanent
Full-time