Bloomberg

Global financial data, news, analytics provider

IT Security Analyst - Threat and Vulnerability Management Team

Offensive Security & TestingPosted on Nov 11

Full-timeNew York, NY, USAIn-person

About the Job

Requirements

At least 5 years of experience in IT operations, systems management, or IT Security-related work.
Hands-on expertise with enterprise network architectures, Linux and Windows operating systems, system administration, or software development.
Knowledge of IT security and system-hardening best practices across operating systems, public cloud, web applications, network devices, and software development life-cycle processes and concepts.
Understanding of enterprise networking concepts, architectures, protocols, segmentation, and access controls to improve vulnerability-scanning strategy and coverage across complex environments.
Knowledge of Active Directory best practices and security hardening.
Experience analyzing vulnerability findings from IT and security management tools.
Understanding of industry standards including NIST, CVE, CPE, and CVSS.
Ability to interpret complex data sets and make informed risk-based decisions.
Ability to manage complex tasks, projects, and initiatives.
Excellent interpersonal and effective communication skills.

Responsibilities

Perform IT security assessments and partner with security or IT professionals to assess potential vulnerability impacts and determine appropriate mitigating controls.
Build partnerships with technical teams to promote vulnerability-management best practices across traditional infrastructure and cloud environments.
Understand business requirements and work with business partners to define solutions that meet both security mandates and business needs.
Standardize workflows, processes, procedures, and reporting.
Produce metrics and key performance indicators demonstrating the effectiveness of the teams' remediation efforts across the enterprise.
Improve the design and usefulness of IT security management tools and solutions.
Hunt for, exploit-test, analyze, and assess vulnerabilities across a wide range of technologies.
Engage with technology partners to test assumptions about the security posture and manage identified vulnerabilities through remediation.
Work with cross-department security engineering and incident response teams to set strategic direction for the enterprise Threat and Vulnerability Management program.

Desired Qualifications

Solid understanding of risk management frameworks.
Experience with operational vulnerability scanners and attack-surface or attack-path management tools such as Rapid7, Qualys, Nessus, or Bloodhound.
Ability to learn and implement technologies quickly.
A bachelor's degree in Computer Science, Engineering, Information Security, or another related field.
At least 2 years of Python programming experience.

Our Team:

The Threat and Vulnerability Management Team (TVM) is dedicated to making our systems and technologies as secure as possible. We protect Bloomberg. We partner with internal technical departments to ensure the confidentiality, integrity, and availability of Bloomberg systems and the data we process. We aim to ensure that our clients see us as a trusted partner.

We report to the Chief Information Security Office (CISO) who owns the technical aspects of this mission by ensuring Bloomberg products, systems, networks and commercial applications are built and maintained with security in mind.

We work on purpose. Come find yours.

What’s The Role?

We are seeking an IT Security Analyst to help ensure that our IT infrastructure and security processes are resilient against the latest threats. You will be responsible for hunting for, exploit testing, analyzing and assessing vulnerabilities across a wide range of technologies. You'll engage with various technology partners to test assumptions of our security posture, and manage identified vulnerabilities through remediation. You will work directly with other cross-department security engineering and incident response teams to set strategic direction for our enterprise Threat and Vulnerability Management program.

This is a team that drives company-wide initiatives to improve the effectiveness of Bloomberg’s security controls. Analysts in this role must show exemplary judgment in making technical decisions to achieve business goals. You're expected to always demonstrate resilience and navigate difficult situations with composure and tact.

We'll Trust You To:

Perform IT Security assessments and partner with other security or IT professionals to assess potential impact from vulnerabilities and determine appropriate mitigating controls
Build strong partnerships with technical teams to promote best practices for managing vulnerabilities across traditional infrastructure and in cloud environments.
Understand business requirements and work with business partners to define appropriate solutions; meeting both security mandates and business needs
Help standardize work-flows, processes, procedures and reporting
Produce metrics and key performance indicators that demonstrate the effectiveness of the teams remediation efforts across the enterprise
Improve the design and usefulness of our IT Security management tools and solutions.
Have excellent interpersonal and effective communications skills

You’ll Need To Have:

5+ years IT operations, systems management or IT Security related experience
Hands-on expertise working with enterprise network architectures, Linux and Windows OS, system administration or as a software developer
Knowledge of IT security and system hardening best practices; including but not limited to operating systems (Windows, Unix, Linux), public cloud, web applications, network devices, SDLC processes, and concepts
Apply an understanding of enterprise networking concepts, architectures, protocols, segmentation, and access controls to improve vulnerability scanning strategy and coverage across a complex environment
Knowledge of Active Directory best practices and application of security hardening
Experience analyzing vulnerability findings from IT and Security management tools
Understanding of industry standards such as NIST, CVE, CPE and CVSS
Ability to interpret complex data sets to make informed risk-based decisions
Can effectively manage complex tasks, projects, and initiatives

We'd love to see:

Solid understanding of Risk management frameworks
Experience working with operational vulnerability scanners, attack surface / path management tools (ie: Rapid7, Qualys, Nessus, Bloodhound)
Ability to learn and implement technologies quickly
A bachelor's degree in Computer Science, Engineering, Information Security, or other related fields
2+ years of Python Programming experience

If This Sounds Like You:

Apply if you think we're a good match. We'll get in touch to let you know what the next steps are!

Salary Range = 155,000 - 190,000 USD Annual + Benefits + Bonus

The referenced salary range is based on the Company's good faith belief at the time of posting. Actual compensation may vary based on factors such as geographic location, work experience, market conditions, education/training and skill level.

We offer one of the most comprehensive and generous benefits plans available and offer a range of total rewards that may include merit increases, incentive compensation (exempt roles only), paid holidays, paid time off, medical, dental, vision, short and long term disability benefits, 401(k) +match, life insurance, and various wellness programs, among others. The Company does not provide benefits directly to contingent workers/contractors and interns.

Discover what makes Bloomberg unique - watch our podcast series for an inside look at our culture, values, and the people behind our success.

About the Company

Bloomberg

Global financial data, news, analytics provider

Bloomberg provides financial data, news, and analysis to help professionals make informed decisions and operate more transparently and efficiently. Its products deliver trusted information and insights through technology platforms that connect global financial communities, enable collaboration, and support decision-making. The company differentiates itself by offering broad, reliable data and news across markets, strong customer focus, and a culture that emphasizes collaboration, broad perspective, and doing the right thing for clients, people, and communities. Bloomberg’s goal is to improve market transparency and efficiency by delivering accurate information and tools that empower customers to act confidently and ethically.

Company size: 10,001+
Company stage: Not listed
Total funding: Not listed
Headquarters: New York City, New York
Founded: 1981

Recently Posted Jobs

Explore more opportunities at Bloomberg

See more jobs