- Bachelor's degree required Computer Science, Information Security, or related field or additional 4 years of required work experience
- Five (5) years or more experience in information security, especially in a vulnerability analysis role on a Computer Incident Response Team (CIRT), Computer Emergency Response Team (CERT), Computer Security Incident Response Center (CSIRC) or a Security Operations Center (SOC) required
- Five (5) years or more experience in deploying and operating vulnerability scanning infrastructure and services. required
- Five (5) years or more experience and direct working knowledge of Information Security control frameworks such as ISO/IEC 27001, NIST CSF, CobIT, etc. required
- Technical expertise in system security vulnerabilities and remediation techniques, network and web-related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, etc.) advanced required
- Technical expertise in security engineering, system and network security, authentication and security protocols, cryptography, and application security advanced required
- Knowledge of Microsoft Windows and Linux systems intermediate required
- Broad understanding of various IT risk and threat assessment methodologies intermediate required
- Knowledge with prioritizing remediation activities with operational teams through risk ratings of vulnerabilities and assets. intermediate required
- Sound Knowledge of common infrastructure and web application vulnerabilities and common vulnerability categorizations such as CVE,CVSS,CWE intermediate required
- Experience with vulnerability management across Amazon Web Services (AWS), Microsoft Azure or Google Cloud Platform (GCP). intermediate preferred
- Knowledge of one or more compliance standards, including Payment Card Industry (PCI), Health Information Portability and Accountability Act (HIPAA), Gramm-Leach-Bliley Act (GLBA), National Institute of Standards (NIST) or International Standards Organization (ISO). advanced required
- Proficient with vulnerability management solutions such as Qualys, Nexpose, Nessus, Kenna Security, Tanium and open source. intermediate required
- Understanding of OWASP, CVSS, the MITRE ATT&CK framework and the software development lifecycle. intermediate required
- Strong Knowledge of technology and security topics including network security, wireless security, application security, infrastructure hardening, security baselines, and web server and database security. advanced required
- Information Risk, Privacy, or Security Certification (CISSP, CCSK, CCSP, PCSM, OSCP, CEH, GPEN)
Travel
1-10%
DOT Regulated
No
Job Category
Information Security
Our Culture & Commitment:
At Ryder, you’re trusted to make an impact—while enjoying room to grow and having a voice that’s heard. Our culture is built on respect, collaboration, and shared pride in doing great work rooted in innovation and safety.
Your Voice. Your Success. The Future We Build Together.
Compensation Information:
The compensation offered to a candidate may be influenced by a variety of factors, including the candidate’s relevant experience; education, including relevant degrees or certifications; work location; market data/ranges; internal equity; internal salary ranges; etc. The position may also be eligible to receive an annual bonus, commission, and/or long-term incentive plan based on the level and/or type. Compensation ranges for the position are below:
Pay Type:
Salaried
Minimum Pay Range:
Maximum Pay Range:
Benefits Information:
- Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one
- An ability to effectively influence others to modify their opinions, plans, or behaviors
- An understanding of business needs and commitment to delivering high-quality, prompt, and efficient service to the business
- An understanding of organizational mission, values, and goals and consistent application of this knowledge
- Excellent time management and organizational skills
- Excellent written and verbal communication skills, interpersonal and collaborative skills
- Skilled at recommending, implementing, and delivering security solutions based on analysis and business requirements
- Ability to obtain and maintain technical team and business support to influence a collaborative effort to reduce attack surface
- Proven trustworthiness and history of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating well
- Self-starter requiring minimal supervision
- Technical expertise in system security vulnerabilities and remediation techniques, network and web-related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, etc.) advanced required
- Technical expertise in security engineering, system and network security, authentication and security protocols, cryptography, and application security advanced required
- Knowledge of Microsoft Windows and Linux systems intermediate required
- Broad understanding of various IT risk and threat assessment methodologies intermediate required
- Knowledge with prioritizing remediation activities with operational teams through risk ratings of vulnerabilities and assets, intermediate required
- Sound Knowledge of common infrastructure and web application vulnerabilities and common vulnerability categorizations such as CVE,CVSS,CWE intermediate required
- Experience with vulnerability management across Amazon Web Services (AWS), Microsoft Azure or Google Cloud Platform (GCP)intermediate preferred
- Knowledge of one or more compliance standards, including Payment Card Industry (PCI), Health Information Portability and Accountability Act (HIPAA), Gramm-Leach-Bliley Act (GLBA), National Institute of Standards (NIST) or International Standards Organization (ISO)advanced required
- Proficient with vulnerability management solutions such as Qualys, Nexpose, Nessus, Kenna Security, Tanium and open source, intermediate required
- Understanding of OWASP, CVSS, the MITRE ATT&CK framework and the software development life cycle, intermediate required
- Strong Knowledge of technology and security topics including network security, wireless security, application security, infrastructure hardening, security baselines, and web server and database security, advanced required
