Senior Vulnerability Manager

INFOSEC

What We Do

Keep Epic’s networks, hardware, and people safe from security risks. Install security measures and operate software to protect systems and information infrastructure, including firewalls and encryption programs. Document issues as they arise and assess & report any impact caused.

What You'll Do

As the Senior Manager of Offensive Security, you will have the opportunity to help mature and drive our Application Security, Offensive Security, and Vulnerability Management teams within the Information Security department to help deliver security services to the Epic enterprise.

In this role, you will

• Lead our Application Security, Offensive Security, and Vulnerability Management teams
• Develop and maintain a long-term strategic plans based on operational lessons learned and Threat Intelligence inputs
• Organize assessments and penetration testing against a multitude of targets, including workstations, servers, web applications/services, networks and games
• Define, document, and manage a framework for Security assessment work
• Manage our Bug Bounty Program
• Drive our shift left approach towards Security Empowerment
• Evangelize SSDLC practices across the organization

What we're looking for

• 7+ years experience specific to offensive security, red team, ethical hacking, and vulnerability management activities
• 5+ years managing Application Security, Offensive Security and Vulnerability Management teams
• Demonstrated experience with: threat modeling, application security, penetration testing, vulnerability management, and security consulting for application and/or infrastructure type projects
• Experience with industry standard infrastructure and application assessment tools
• Offensive security certification (OSCP, OSCE/OSCE3, GPEN, GWAPT) is a plus
• Knowledge of Secure Coding and Application Security frameworks (OWASP, SANS SWE, CERT Secure Coding) is a plus

EPIC JOB + EPIC BENEFITS = EPIC LIFE

Our intent is to cover all things that are medically necessary and improve the quality of life. We pay 100% of the premiums for both you and your dependents. Our coverage includes Medical, Dental, a Vision HRA, Long Term Disability, Life Insurance & a 401k with competitive match. We also offer a robust mental well-being program through Modern Health, which provides free therapy and coaching for employees & dependents. Throughout the year we celebrate our employees with events and company-wide paid breaks. We offer unlimited PTO and sick time and recognize individuals for 7 years of employment with a paid sabbatical.

This role is open to multiple locations across the US (including WA).

Pay Transparency Information

The expected annual base pay range(s) for this position are detailed below. Each base pay range is relevant only for individuals who are residents of or will be expected to work within the specified locale. Compensation varies based on a variety of factors, which include (but aren’t limited to) things such as skills and competencies, qualifications, knowledge, and experience. In addition to base pay, most employees are eligible to participate in Epic’s generous benefit plans and discretionary incentive programs (subject to the terms of those plans or programs).