Security Engineer, Vulnerability Management (Remote USA) - Must be US citizen

Say hello to opportunities.

It’s not every day that you consider starting a new career. We’re RingCentral, and we’re happy that someone as talented as you is considering this role.

First, a little about us, we’re a $2 Billion annual revenue company with double digit Annual Recurring Revenue (ARR) and a $93 Billion market opportunity in UCaaS, Contact Center and AI-powered adjacencies.

We invest more than $250 million annually to ensure our AI-enabled technology and platforms meet or exceed the needs of our customers.

RingSense AI is our proprietary AI solution. It’s designed to fit the business needs of our customers, orchestrated to be accurate and precise, and built on the same open platform principles we apply to our core software solutions.

This is where you and your skills come in. We're currently looking for : Security Engineer, Vulnerability Management

As a Security Engineer, Vulnerability Management at RingCentral, your primary responsibilities will be to perform vulnerability scans of our systems and networks, and monitor, triage and track remediation of vulnerabilities.

In addition you'll be developing automation for these tasks. This role can be based 100% remote, or as a hybrid employee based at our Belmont CA, Denver CO, or Dallas TX offices.

Primary Duties :

Maintain Vulnerability Management process

Perform vulnerability scans using different tools / methods

Prioritize findings and assign them to system / service owners

Monitor for, triage and track remediation of vulnerabilities in our systems and networks

Conduct risk-based evaluation of policy exception requests

Develop automatization for all steps above

Develop visualization of current VM state

Participate in and assist with audits of information security program (FedRAMP, SOX, GDPR, SOC2, HITRUST)

Act as a member of the information security policy review committee

Additional Roles and Responsibilities :

• Conduct routine log review of information security events, investigating and responding as necessary
• Maintain and enhance monitoring capabilities to ensure the integrity of our systems and networks
• Act as a member of the Incident Response Team, triaging, responding to and reporting incidents and associated metrics
• Administer and maintain security products (phishing training, vulnerability management, web application firewall, SIEM, IDS, (h)IPS, EDR, etc)
• Participate in on-call rotation
• Maintain a comprehensive understanding of our information systems
• Work closely with the multiple operation teams to implement and enforce our policy
• Coordinate and participate in external assessments of our information security (risk assessment, penetration test, incident response tabletop)

Required Skills :

• Experience operating vulnerability scanning tools (Qualys, Nessus, etc)
• Familiarity with vulnerability management concepts, such as CVE and CVSS
• Familiarity with hardening standards and benchmarks (CIS, STIG, etc)
• Strong knowledge of endpoint and server operating systems (e.g. Windows, macOS, Linux) and relevant security risks, controls, and vulnerabilities
• Strong knowledge of network and network security fundamentals
• Familiarity with AWS environments and AWS security tools
• Knowledge of and experience with compliance / remediation efforts of relevant domestic and international security standards and best practices such as FedRAMP, SOX, SOC2, NIST, GDPR and HIPAA
• Familiarity with cloud computing environments and applications in a security context strongly preferred
• Ability to quickly change priorities and handle simultaneous tasks
• Excellent oral and written communications

Desired Qualifications :

• 3-5 years' experience in an information security field
• US Citizenship required
• BS degree in Computer Science, Cyber Security, Information Technology (or related discipline); Graduate degree in Information Assurance (or related discipline) or equivalent formal training and experience in Information Security
• CISSP or GIAC certifications preferred

What we offer :

• RingCentral offers all the work / life benefits you could ever want, (and none of the micromanagement.)
• Comprehensive medical, dental, vision, disability, life insurance
• Health Savings Account (HSA), Flexible Spending Account (FSAs) and Commuter Benefits
• 401K match and ESPP
• Flexible PTO
• Wellness programs including1 : 1 wellness coaching through TaskHuman and meditation guidance through Headspace
• Paid parental leave and new parent gift boxes
• Pet insurance
• Employee Assistance Program (EAP) with counseling sessions available 24 / 7
• Rocket Lawyer services that provide legal advice, document creation and estate planning
• Employee bonus referral program

RingCentral’s Engineering team works on high-complexity projects that set the standard for performance and reliability at massive scale.

What kind of scale? Millions of users today and hundreds of millions tomorrow. This is your chance to help imagine, develop and deliver products that raise the technological bar, and power human connections.

If you’re a talented, ambitious, creative thinker, RingCentral is the perfect environment to join a world class team and bring your ideas to life.

RingCentral’s work culture is the backbone of our success. And don’t just take our word for it : we are recognized as a Best Place to Work by Glassdoor, the Top Work Culture by Comparably and hold local BPTW awards in every major location.

Bottom line : We are committed to hiring and retaining great people because we know you power our success.