Vulnerability Analyst ( 3rd Party Risk Assessment )

Discover. A brighter future.With us, you'll do meaningful work from Day 1. Our collaborative culture is built on three core behaviors: We Play to Win, We Get Better Every Day & We Succeed Together. And we mean it - we want you to grow and make a difference at one of the world's leading digital banking and payments companies. We value what makes you unique so that you have an opportunity to shine.Come build your future, while being the reason millions of people find a brighter financial future with Discover.Job Description:At Discover, be part of a culture where diversity, teamwork, and collaboration reign. Join a company that is just as employee focused as it is on its customers and is consistently awarded for both. We're all about people, and our employees are why Discover is a great place to work. Be the reason we help millions of consumers build a brighter financial future and achieve yours along the way with a rewarding career.Discover will not sponsor or transfer employment work visas for this position. Applicants must be currently authorized to work in the United States on a full-time basis.As a Vulnerability Analyst you will:- Write comprehensive cybersecurity risk assessments identifying threats & vulnerabilities and recommend remediation.- Conduct formal, systematic threat modeling of IT systems using STRIDE methodology.- Apply deep knowledge of procedure-based controls of a cybersecurity program including qualitative risk analysis steps, vulnerability and patch management, threat modeling, Identity and Access Management (IAM), cybersecurity frameworks (NIST CSF, PCI-DSS and CIS).- Practice expert level assessment skills using technology-based controls of a cybersecurity program including cloud security, Artificial Intelligence / GenAI risks, penetration testing results, cryptography & network security fundamentals, malware defense, data loss prevention and endpoint security.- Compile professional security assessment reports, slides, and lead discussions to effectively communicate the risks and remediation options to partners.- Demonstrate sound knowledge of Incident Management Respond and Recover functions from a cyber resiliency perspective.Responsibilities- Work independently to identify vulnerabilities in deployment of technologies, severity, and impact, and recommend risk-based options for remediation.- Actively collaborate with business partners, application architects and partner security teams to research and build security solutions aligned to business goals.- Learn advanced cybersecurity concepts including new and modern threat exploitation techniques of threat actors.- Achieve team commitments (and influence others to do the same) by using informal leadership & advanced communication skills.- Actively manage and escalate risk and customer-impacting issues within the day-to-day role to management.- Demonstrate excellent technical writing skills.- Mentor novices by providing learning tasks as well as work related tasks, direct the work of advanced beginners, and help them continue to grow.- Communicate effectively and promptly every day and lead cybersecurity discussions at Discover. Provide oversight on security programs impacting decisions. Guide team to achieve key results for the assigned security assessment tasks.Minimum QualificationsAt a minimum, here is what we need from you:- Bachelors - Computer Science, Information Security, Engineering- 4+ years - Information Security, Cybersecurity, Computer Science, Data Analytics or related- In lieu of a degree 6+ years - Information Security, Cybersecurity, Computer Science, Data Analytics or related.Internal applicants only: technical proficiency rating of competent on the Dreyfus cybersecurity scale.Preferred Qualifications :If we had our say, we would also look for:- Cyber certifications such as CISSP, CISM and GIAC.- 4+ years of experience in cybersecurity controls assessment integrated with risk management steps.- Familiarity with Zero Trust architecture.- Risk Management framework and experience in Agile methodology.- 3rd party vendors cyber risk assessment.- Experience assessing security for cloud platforms (SaaS, PaaS, IaaS).- Experience in network / OS / database system security administration.What are you waiting for? Apply today!And by the way, while you're waiting to hear from us, don't forget to check out the great benefits Discover offers.All Discover employees place our customers at the very center of our work. To deliver on our promises to our customers, each of us contribute every day to a culture that values compliance and risk management.The same way we treat our employees is how we treat all applicants - with respect. Discover Financial Services is an equal opportunity employer (EEO is the law (https://www.dol.gov/ofccp/regs/compliance/posters/ofccpost.htm) ). We thrive on diversity & inclusion. You will be treated fairly throughout our recruiting process and without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status or any other characteristic protected by federal, state, or local law in consideration for a career at Discover.Application Deadline:The application window for this position is anticipated to close on Aug-26-2024. We encourage you to apply as soon as possible. The posting may be available past this date, but it is not guaranteed.Compensation:The base pay for this position generally ranges between $88,500.00 to $149,300.00. Additional incentives may be provided as part of a market competitive total compensation package. Factors, such as but not limited to, geographical location, relevant experience, education, and skill level may impact the pay for this position.Benefits:We also offer a range of benefits and programs based on eligibility. These benefits include:- Paid Parental Leave- Paid Time Off- 401(k) Plan- Medical, Dental, Vision, & Health Savings Account- STD, Life, LTD and AD&D- Recognition Program- Education Assistance- Commuter Benefits- Family Support Programs- Employee Stock Purchase PlanLearn more at mydiscoverbenefits.com .What are you waiting for? Apply today!All Discover employees place our customers at the very center of our work. To deliver on our promises to our customers, each of us contribute every day to a culture that values compliance and risk management.Discover is committed to a diverse and inclusive workplace. Discover is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, or other legally protected status. (Know Your Rights & Pay Transparency Nondiscrimination Provision) (https://www.dol.gov/agencies/ofccp/posters)Discover complies with federal, state, and local laws applicable to qualified individuals with disabilities and is committed to providing reasonable accommodations. If you require a reasonable accommodation to search for a position, to complete an application, and/or to participate in an interview, please email HireAccommodation@discover.com . Any information you provide regarding your accommodation needs will be kept confidential and will only be used to determine and provide necessary accommodation.