Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
Tailor your resume to this Senior Systems Engineer role.
Rezi rewrites your resume against Wellington Management's job description. Free.
Tailor your resume to this Senior Systems Engineer role.
Rezi rewrites your resume against Wellington Management's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Senior Systems Engineer posting at Wellington Management — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Senior Systems Engineer posting at Wellington Management — free, in seconds.
About the Role
The Attack Surface Management team is seeking a Lead Security Engineer to minimize potential attack surfaces through vulnerability management, cloud configuration assessments, and threat intelligence incorporation. This role involves building, enhancing, and automating policies, standards, and processes using various technologies to identify vulnerabilities and misconfigurations.
Responsibilities
- Perform assessments and communicate to stakeholders on the likelihood of exploitation and potential impact of vulnerabilities, misconfiguration findings, and other potential vectors to determine the appropriate course of action to mitigate potential risk.
- Leverage Cloud Native Application Protection Platform (CNAPP) technology to assess findings and contribute guidance and expertise to application custodians on fixing issues.
- Act as a security liaison between Information Security and the Development staff to bring a security mindset to the software development lifecycle.
- Assess and understand the Wellington CI/CD pipeline to provide recommendations to developers for securing their code.
- Lead urgent vulnerability response, misconfiguration events, or otherwise assist with Cyber Defense as needed.
- Use scripting and AI to automate manual workflows, assist with data assessments, and shorten time gaps from ideas to outputs.
- Develop and mature an internal security hardening and baselines program to ensure attack surface risk is reduced and configuration baselines are met according to CIS Controls and cyber threats.
- Stay up to date with current and relevant cyber security threats and countermeasures.
- Participate in internal meetings to map industry cyber threats to our current attack surface.
- Review internal and open-source threat intelligence sources for recently disclosed vulnerabilities at risk of introduction into the Wellington environment.
- Work with the Third-Party Risk team to engage third parties in Wellington’s vendor ecosystem to understand when third and fourth parties may be exposed to critical vulnerabilities.
- Contribute to team documentation for updates to existing processes, new processes, assessment tool infrastructure details and workflows.
- Contribute to firmwide documentation by being an SME contributor to policies and standards.
Requirements
- A Passion for cyber-security is a must.
- Ability to self-motivate, with an eagerness to dig into potential risks.
- Ask questions, be curious, dig deeper.
- BS degree in Information Systems/related discipline or equivalent IT work experience.
- Experience in developing new processes and procedures that match evolving attack surfaces.
- Excellent oral and written communication skills with a proven ability to effectively interact with teams representing a wide variety of technical disciplines.
- Ability to work with global teams effectively.
- Ability to mentor junior team members and share discoveries about your work.
- Experience working with both WIZ CNAPP and Qualys vulnerability management platforms.
- Hands-on experience with vulnerability assessment software and prioritizing results using a combination of various frameworks tied to internal objects (CVE, CVSS, EPSS, etc.).
- Knowledge of common cyber-attack types such as DDoS, SQLi, XSS, and others.
- Previous experience assessing, documenting, and communicating information security risk, particularly related to cyber vulnerabilities is preferred.
- Experience in the use of common scripting languages such as python to automate job functions.
- Working knowledge of IaC (Infrastructure as Code) concepts, especially with AWS.
- Knowledge in the areas of network architecture and engineering and software application development.
- Working knowledge of the use of threat intelligence feeds and resources.
- Preferred: Experience working with Splunk, JFrog Artifactory, JFrog Curation (or similar), ServiceNow, AWS Services, MS Azure, MS Intune, Anthropic Claude.
- Preferred: Home labs, security practitioner meetups, research.
Skills
- Vulnerability Management
- Cloud Configuration Assessments
- Threat Intelligence
- Policy Automation
- CNAPP
- CI/CD Pipeline Security
- Cyber Defense
- Scripting
- AI
- Security Hardening
- CIS Controls
- Cyber Security Threats
- Third-Party Risk Management
- Documentation
- WIZ CNAPP
- Qualys
- CVE
- CVSS
- EPSS
- DDoS
- SQLi
- XSS
- Python
- IaC
- AWS
- Network Architecture
- Software Application Development
- Threat Intelligence Feeds
- Splunk
- JFrog Artifactory
- JFrog Curation
- ServiceNow
- AWS Services
- MS Azure
- MS Intune
- Anthropic Claude
Location
- London
Work Type
- Hybrid (4 days in office, 1 day remote)
Experience Level
- Lead
- Senior
Education Level
- BS degree in Information Systems/related discipline or equivalent IT work experience
About the Company
- Wellington Management offers comprehensive investment management capabilities that span nearly all segments of the global capital markets.
- Our investment solutions, tailored to the unique return and risk objectives of institutional clients in more than 50 countries, draw on a robust body of proprietary research and a collaborative culture that encourages independent thought and healthy debate.
- As a private partnership, we believe our ownership structure fosters a long-term view that aligns our perspectives with those of our clients.
Equal Opportunity
- As an equal opportunity employer, Wellington Management considers all qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, gender expression, religion, creed, national origin, age, ancestry, disability (physical or mental), medical condition, citizenship, marital status, pregnancy, veteran or military status, genetic information or any other characteristic protected by applicable law.
- If you are a candidate with a disability, or are assisting a candidate with a disability, and require an accommodation to apply for one of our jobs, please email us at GMWTalentOperations@wellington.com.