Job description
General information
Ally and Your Career
The Opportunity
At Ally, you get a startup feel, but experience the benefits of a company that’s worked out the kinks and is fulfilling its purpose. We’re always evolving and see that as a good thing. From owning our work to seeing its impact in the real world, our team is relentless in finding new ways technology can help make experiences better and help people. We are problem solvers, we value diverse thinking, we support one another, and we challenge ourselves to think bigger in the journey to deliver customer-obsessed tech solutions.
To read more about what our tech team does, be sure to visit our tech blog at ally.tech
The Vulnerability Analyst will support the configuration compliance and infrastructure vulnerability management programs with identifying, reporting, and enabling remediation of vulnerability and compliance findings. The ideal candidate for this role will have a strong technical foundation in system administration (Unix or Windows), familiarity with networking and cyber security, and hands-on experience with infrastructure scanning tools. Cloud, container, and/or python development experience is a plus. The candidate must be equally comfortable speaking with developers as well as infrastructure teams about vulnerabilities and configuration compliance.
Reporting into the Director of Vulnerability Management, the Vulnerability Analyst will be accountable for the identification, reporting and remediation of vulnerability and compliance findings within their area of responsibility.
The Work Itself
- Maintain awareness of the latest critical information security vulnerabilities, threats, and exploits
- Assist in facilitating vulnerability and compliance scanning and reporting activities, as directed by senior team members, ensuring accurate & timely identification, reporting, and escalation.
- Leverage vulnerability management reports and metrics, to drive remediation of vulnerabilities for specified areas of the environment
- Communicate with Ally technology staff on vulnerability management and remediation of key vulnerabilities. Assist teams with understanding the vulnerability, possible remediation's, and assist with false positives or mitigation solutions.
- Identify enhancements to tools, standards, and processes to enable continuous process improvement and automation of existing processes.
- In zero-day events, iterate through VM lifecycle – creatively assist with time-sensitive escalations, developing new types of reports, and perform special investigations.
The Skills You Bring
- 1+ years of experience in technology or cyber security
- Bachelor’s degree in a related field (Computer Science, Engineering, Information Systems, etc.) or the equivalent combination of training and experience
- Mid-level knowledge of Windows or Linux system administration and related security configurations, networking, and cyber security
- Intermediate Python development experience preferred
- Virtualization, cloud, and container experience preferred
- Working knowledge of security risk oversight, CVSS (Common Vulnerability Scoring System), CVE (Common Vulnerabilities and Exposures), and technical security vulnerability remediation/mitigation
- Experience with enterprise vulnerability management platforms such as Rapid7 Nexpose, Tenable Nessus, or Qualys
- Experience with ServiceNow preferred
- Skilled at analyzing IT/VM data sets using tools such as Excel or Power BI and presenting in a meaningful, digestible format for stakeholders and leadership teams
- Excellent communications skills (verbal and written) are required. Adept at communicating concepts to diverse audiences with varying skill sets
- A self-motivated, detail-orientated individual with the ability to work independently as well as function as an integral part of a team and take initiative and ownership in a fast-paced environment.
How We'll Have Your Back
- Time Away: competitive holiday and flexible paid-time-off, including time off for volunteering and voting.
- Planning for the Future: plan for the near and long term with an industry-leading 401K retirement savings plan with matching and company contributions, student loan and 529 educational assistance programs, tuition reimbursement, and other financial well-being programs.
- Supporting your Health & Well-being: flexible health and insurance options including dental and vision, pre-tax Health Savings Account with employer contributions and a total well-being program that helps you and your family stay on track physically, socially, emotionally, and financially.
- Building a Family: adoption, surrogacy, and fertility support as well as parental and caregiver leave, back-up child and adult/elder day care program and childcare discounts.
- Work-Life Integration: other benefits including LifeMatters® Employee Assistance Program, subsidized and discounted Weight Watchers® program and other employee discount programs.
Who We Are:
Ally Financial is a customer-centric, leading digital financial services company with passionate customer service and innovative financial solutions. We are relentlessly focused on "Doing it Right" and being a trusted financial-services provider to our consumer, commercial, and corporate customers. For more information, visit www.ally.com.
Ally is an equal opportunity employer committed to diversity and inclusion in the workplace. All qualified applicants will receive consideration for employment without regard to age, race, color, sex, religion, national origin, disability, sexual orientation, gender identity or expression, pregnancy status, marital status, military or veteran status, genetic disposition or any other reason protected by law.
We are committed to working with and providing reasonable accommodation to applicants with physical or mental disabilities. For accommodation requests, email us at work@ally.com. Ally will not discriminate against any qualified individual who is capable of performing the essential functions of the job with or without reasonable accommodation.
caravetterealestate.com is the go-to platform for job seekers looking for the best job postings from around the web. With a focus on quality, the platform guarantees that all job postings are from reliable sources and are up-to-date. It also offers a variety of tools to help users find the perfect job for them, such as searching by location and filtering by industry. Furthermore, caravetterealestate.com provides helpful resources like resume tips and career advice to give job seekers an edge in their search. With its commitment to quality and user-friendliness, caravetterealestate.com is the ideal place to find your next job.