Vulnerability Analyst (Cybersecurity Risk Assessments) at Discover – Riverwoods, IL

Discover. A better future.

With us, you’ll be doing meaningful work from day 1. Our collaborative culture is built on three core behaviors: We Play to Win, We Get Better Every Day & We Succeed Together. And we mean it: we want you to grow and make a difference at one of the world’s leading digital banking and payments companies. We value what makes you unique, so you have the opportunity to shine.

Come build your future and be the reason millions of people find a better financial future with Discover.

Job description:

At Discover, you’ll be part of a culture where diversity, teamwork and collaboration reign supreme. Join a company that focuses on employees as much as it does on customers—and consistently rewards both. We’re all about people, and our employees are the reason Discover is a great place to work. Be the reason we help millions of consumers build a better financial future, and achieve yours with a rewarding career.

Discover does not sponsor or transfer work visas for this position. Applicants must be currently authorized to work full-time in the United States.

As a Vulnerability Analyst you will:

• Write comprehensive cybersecurity risk assessments that identify threats and vulnerabilities and recommend solutions.

• Perform formal, systematic threat modeling of IT systems using the STRIDE methodology.

• Apply in-depth knowledge of procedural controls of a cybersecurity program, including qualitative risk assessment steps, vulnerability and patch management, threat modeling, identity and access management (IAM), and cybersecurity frameworks (NIST CSF, PCI-DSS, and CIS).

• Practice expert-level assessment skills using technology-based controls of a cybersecurity program, including cloud security, artificial intelligence/GenAI risks, penetration testing results, cryptography and network security fundamentals, malware defense, data loss prevention, and endpoint security.

• Create professional security assessment reports and slides and lead discussions to effectively communicate risks and remediation options to partners.

• Demonstrate solid knowledge of the Incident Management Respond and Recover functions from a cyber resilience perspective.

Responsibilities

• Work independently to identify technology implementation vulnerabilities, severity, and impact and recommend risk-based remediation options.

• Actively collaborate with business partners, application architects, and partner security teams to research and develop security solutions that align with business goals.

• Learn advanced cybersecurity concepts, including new and modern techniques for exploiting threats by threat actors.

• Achieve team goals (and influence others to do the same) by using informal leadership and advanced communication skills.

• Actively manage and escalate risks and issues impacting the customer within the day-to-day role to management.

• Demonstrate excellent technical writing skills.

• Mentor beginners by giving them both learning and work-related assignments, mentor advanced beginners in their work and help them continue to grow.

• Communicate effectively and promptly every day and lead cybersecurity discussions at Discover. Provide oversight of security programs that impact decisions. Guide the team to achieve key results for assigned security assessment tasks.

Minimum qualifications

This is what we expect from you as a minimum:

• Bachelors – Computer Science, Information Security, Engineering

• 4+ years – Information Security, Cybersecurity, Computer Science, Data Analytics or related

• Instead of a 6+ year degree – Information Security, Cybersecurity, Computer Science, Data Analytics or related.

For internal candidates only: technical competence assessment of competent on the Dreyfus cybersecurity scale.

Desired qualifications:

If it were up to us, we would also look for:

• Cyber ​​certifications such as CISSP, CISM and GIAC.

• More than 4 years of experience in assessing cybersecurity measures, integrated with risk management steps.

• Knowledge of Zero Trust architecture.

• Risk management framework and experience with the Agile methodology.

• cybersecurity risk assessments

• Experience in assessing the security of cloud platforms (SaaS, PaaS, IaaS).

• Experience with network/OS/database system security management.

What are you waiting for? Apply today!

And while you wait for our response, don’t forget to check out the great benefits Discover offers.

All Discover employees put our customers at the center of our work. To deliver on our promises to our customers, we all contribute every day to a culture that values ​​compliance and risk management.

We treat all applicants for employment the same way we treat our employees – with respect. Discover Financial Services is an equal opportunity employer (EEO is the law). We thrive on diversity and inclusion. You will be treated fairly in our hiring process and without discrimination based on race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status or any other characteristic protected by federal, state or local law in consideration for a career at Discover.

Deadline for registration:

The application period for this position is expected to close on 14-09-2024. We encourage you to apply as soon as possible. The position may be available after this date, but this is not guaranteed.

Compensation:

The base salary for this position typically ranges from $88,500.00 to $149,300.00. Additional incentives may be provided as part of a market competitive total compensation package. Factors such as, but not limited to, geographic location, relevant experience, education, and skill level may affect the salary for this position.

Advantages:

We also offer a range of benefits and programs based on eligibility. These benefits include:

• Paid parental leave

• Paid time off

• 401(k) plan

• Savings account for medical, dental, vision and health purposes

• STD, Life, LTD and AD&D

• Recognition Program

• Educational assistance

• Benefits for commuters

• Family Support Programs

• Employee Stock Purchase Plan

For more information, visit mydiscoverbenefits.com.

What are you waiting for? Apply today!

All Discover employees put our customers at the center of our work. To deliver on our promises to our customers, we all contribute every day to a culture that values ​​compliance and risk management.

Discover is committed to a diverse and inclusive workplace. Discover is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, or other legally protected status. (Know Your Rights & Pay Transparency Nondiscrimination Provision)

Discover complies with federal, state, and local laws applicable to qualified individuals with disabilities and is committed to providing reasonable accommodations. If you require a reasonable accommodation to search for a position, complete an application, and/or participate in an interview, please email [email protected]. Any information you provide regarding your accommodation needs will be kept confidential and will only be used to determine and provide the necessary accommodation.