{"id":10173,"url":"https://alion.io/job/gendigital-security-controls-engineer-vulnerability-management","title":"Security Controls Engineer - Vulnerability management","company":{"id":3431,"name":"Gen Digital","domain":"gendigital.com","url":"https://alion.io/company/gendigital","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":80,"open_postings":23,"ghost_share":0,"stale_share":0.565,"repost_share":0.043,"time_to_fill_p50_days":62,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Brno, Czech Republic","Prague, Czech Republic"],"countries":["CZ"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":32000,"max_usd":76000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":774},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"Jira","optional":false},{"name":"PCI DSS","optional":false},{"name":"SBOM","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-04-27T20:30:03Z","employer_posted_date":"2026-04-27","last_verified_at":"2026-10-22T17:16:57Z","board_verified":true,"closed_at":null,"days_open":177,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":177},"description":"About Us:\nGen is a global company dedicated to powering Digital Freedom through its trusted consumer brands including Norton, Avast, LifeLock, MoneyLion and more. Our combined heritage is rooted in financial empowerment and cyber safety for the first digital generations, and today we deliver award-winning cybersecurity, online privacy, identity protection and financial wellness solutions to nearly 500 million users in more than 150 countries.\nTogether, we share a collective passion and vision to protect consumers and help them grow, manage and secure their digital and financial lives. We’re always looking for smart, fearless and high-impact talent who see AI as a teammate - leveraging it to move faster and deliver meaningful results.\nWhen you’re part of Gen, you’ll have the flexibility, tools and support to do your best work and grow your career - from flexible working options and time off to competitive pay, benefits and well-being programs.\nAt Gen, we are scrappy and relentlessly customer driven. We create room for healthy debate, experimentation and continuous learning, and we seek out people with different experiences, identities and ideas to join our team. You’ll work with people who back each other, respect each other and understand that our differences are a competitive advantage.\nIf this sounds like you, we’d love you to be part of Gen.\nAbout The Role:\nWe are a team that brought you Norton, Avast, LifeLock, Avira, AVG, ReputationDefender, and CCleaner, dedicated to providing cybersecurity, privacy, and identity protection to over 500 million users in 150 countries. At Gen, we offer flexible working options, generous time off, and competitive benefits in a diverse and inclusive environment where every team member is valued and celebrated. If you are smart, fearless, and dedicated, join us to power Digital Freedom and help consumers take control of their digital lives.\nWe’re looking for an independent, driven security professional who thrives at the intersection of security, DevOps, and delivery. In this role, you will translate legal and security framework requirements into clear, actionable vulnerability management and remediation programs that operate across multiple Security and DevOps teams.\nYou’ll help design, operationalize, and continually improve our vulnerability management lifecycle, from identification and triage through prioritization and remediation to validation and reporting. This includes secure development practices within regulatory frameworks guiding vulnerability handling, coordinated disclosure, SBOM transparency, patch management, and post-deployment monitoring.\nYou will track, report, and escalate progress, risks, and dependencies, partnering closely with a Senior Project Manager and reporting to senior leadership.\nIf you enjoy making complex requirements practical, measurable, and delivered-this is for you.\nAbout You:\nPractical exposure or experience (typically 3-5 years) in vulnerability management, security engineering, or security program delivery in a cloud/software environment.\nDemonstrated ability to work independently and drive outcomes across multiple teams.\nWorking understanding of regulatory security requirements and demonstrated experience with common frameworks/regulations implementation (e.g., ISO 27001, NIS2, SOC 2, GDPR, PCI DSS).\nStrong translation skills: turn policy and control language into developer-ready user stories, acceptance criteria, remediation tasks, and runbooks.\nHands-on experience using work tracking tools (Jira, Azure DevOps, etc.) and crafting status reports/dashboards for leadership.\nStrong communication skills: comfortable analyzing vulnerability trends, including ageing, patch latency, and systemic root causes, supported by concise writing ability, clear meeting facilitation, and demonstrated experience with stakeholder alignment.\nUnderstanding of modern SDLC/DevOps practices (CI/CD, IaC, pipelines, change management).\nExperience in cloud environments (AWS/Azure/GCP), including shared responsibility and guardrail patterns.\nWry sense of humor is a plus\nWhat’s Next:\nOur interview process consists of two stages:\nFirst round: You’ll meet Andrej Valentovič, the Hiring Manager for this role, to discuss your experience and the position in more detail.\nSecond round: You’ll have an online interview with his manager to further explore your fit and expectations.","description_format":"text","description_chars":4398,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Flexible schedule"],"hiring_locations":[{"name":"Czech Republic","iso":"CZ","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Information Security","Vulnerability Management","Consumer & Utility Software"],"lifecycle":[{"event":"open","at":"2026-04-27T20:30:03Z"}],"visa":[],"liveness":{"score":9,"band":"cold","label":"Long shot","p_open":1,"p_active":0.331,"p_room":0.28,"age_days":177,"expected_fill_days":62,"reasons":["conf:0","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-22T06:10:10Z"},"pay":null,"html_url":"https://alion.io/job/gendigital-security-controls-engineer-vulnerability-management","json_url":"https://alion.io/job/gendigital-security-controls-engineer-vulnerability-management.json","meta":{"generated_at":"2026-10-22T18:22:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":969,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3431},"rest":"https://alion.io/mcp/rest/get_company?id=3431"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgendigital-security-controls-engineer-vulnerability-management"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgendigital-security-controls-engineer-vulnerability-management"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgendigital-security-controls-engineer-vulnerability-management"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/gendigital-security-controls-engineer-vulnerability-management\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgendigital-security-controls-engineer-vulnerability-management"}]}