Senior Vulnerability Management Engineer
for section headings. Use - for any list of duties/requirements/benefits. Use
for prose.
We need to preserve all substantive information, not invent or summarize away detail. Remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning, duplicated lines, application instructions. Also remove repeated "Please note: This position does not offer work authorization sponsorship..." appears twice; we should keep only once? The instruction: remove duplicated lines. So we should keep only one instance of that note. Also remove "Please log in or create an account to apply to this position." etc. Also remove "Principals only. EOE." etc. Also remove "Information on Interviews:" etc. Also remove "Company Overview" maybe we keep as it's substantive? It's about company; we can keep as a section maybe "About the Company" but heading must be from list: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. The instructions say use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). It seems we should limit to those headings. So we need to map content to those headings. "About the role" could cover Job Overview. "Responsibilities" as given. "Requirements" could cover the "What are we looking for?" and the Requirements list. "Qualifications" maybe not needed if we have Requirements. "Skills" maybe not needed. "Benefits" we have mention of Total Rewards package. "Pay" we have Pay Range. "Schedule" not present, so omit.
We should not create sections with filler. So we will include About the role, Responsibilities, Requirements, Benefits, Pay. Possibly also "Qualifications" if we have degree preferences; but we could put that under Requirements or Qualifications. The instructions: Prefer a few substantive sections over many thin ones. So we could combine degree preferences into Requirements. We'll have Requirements include experience, education, etc.
We need to preserve all substantive information: So we need to include details from Job Overview, Responsibilities bullet points, Requirements bullet points, Preferences bullet points, Pay Range, Benefits description (Total Rewards package). Also maybe include note about work authorization sponsorship (we keep once). Also maybe include Company Overview? Not in allowed headings; but we could put under About the role? But it's about company, not role. However instructions say we can use headings e.g. About the role, Responsibilities, etc. It doesn't forbid other headings but says use those for section headings. It might be okay to add other headings if needed, but better to stick to allowed. Company Overview could be considered "About the role"? Not exactly. But we could omit it as it's not required? The instruction: Preserve ALL substantive information; do NOT invent or summarize away detail. So we must keep company overview info. If we omit a section, we lose that info. So we need to include it somewhere. Could we put it under About the role? That might be okay as it's about the company but still relevant to role. Or we could add a heading "About the Company" but not in list; risk of violating instruction. The instruction: "Use for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." The e.g. suggests examples, not exclusive list. So we can use other headings as long as they are . Safer to use "About the Company". But they said e.g. About the role, Responsibilities... Might be okay to use other headings. I'll include "About the Company" as . Also we need to include "Work Authorization" note maybe as a
under About the role or separate.
We must not include application instructions, boilerplate, duplicated lines.
Let's extract content:
Job Description Where Ambition Meets Innovation Build a career that matches all your initiative with an impressive dose of innovation. From cutting-edge resources and a collaborative environment to the freedom to make an impact and more, you’ll find the ingredients you need at LPL Financial to shape your success while helping clients pursue their financial goals.
Please note: This position does not offer work authorization sponsorship now or in the future. Applicants must have valid U.S. work authorization that does not require employer sponsorship.
Job Overview: LPL Financial is in search of a Senior Vulnerability Management Engineer who can execute and mature the existing Vulnerability Management program at LPL and its subsidiaries. As a member of the Cyber Security organization, the Senior Vulnerability Management Engineer plays a key role in securing systems built and/or used by LPL Financial. A successful candidate can expect to manage Vulnerability Scanning tools and work closely with infrastructure, cloud, engineering, and application teams, as well as third party vendors to ensure that vulnerabilities are effectively managed throughout the environment.
Responsibilities: (list bullet points)
What are we looking for? We want strong collaborators who can deliver a world-class client experience. We are looking for people who thrive in a fast-paced environment, are client-focused, team oriented, and are able to execute in a way that encourages creativity and continuous improvement.
Requirements: 5+ years of practical experience in information security field within a large enterprise environment 5+ years of vulnerability management experience working with vulnerability management tools (e.g. Qualys, InsightVM/Rapid7, Wiz, Nessus, etc.)
Preferences: Bachelors and/or Master’s Degree or in Information Security, Engineering, Computer Science.Familiar with industry standard security best practices and vulnerability management processes including identification, analysis, reporting, and remediation.Advanced level of knowledge of the major Cloud platforms, the types of resources that can be deployed within each platform, common cloud misconfigurations/vulnerabilities and how to fix such issuesIn depth understanding of types of vulnerabilities and techniques/compensating controls to mitigate associated riskExperience managing and using Cloud Security Posture Management tools such as Wiz, XPanse, Prisma, Laceworks, OrcaExperience with reviewing, analyzing, managing, and remediating security vulnerabilities and misconfigurations in cloud resourcesExperience at a financial services/technology company or in a regulated industry.Ability to communicate with both technical and non-technical stakeholders at all levels of the organization.Strong analytical, interpersonal and communication skills
Pay Range: $100,631.00 - $167,787.00 Actual base salary varies based on factors, including but not limited to, relevant skill, prior experience, education, base salary of internal peers, demonstrated performance, and geographic location. Additionally, LPL Total Rewards package is highly competitive, designed to support your success at work, at home, and at play – such as 401K matching, health benefits, employee stock options, paid time off, volunteer time off, and more. Your recruiter will be happy to discuss all that LPL has to offer!
Company Overview: LPL Financial Holdings Inc. (Nasdaq: LPLA) is among the fastest growing wealth management firms in the U.S. As a leader in the financial advisor-mediated marketplace(6) , LPL supports over 32,000 financial advisors and the wealth management practices of approximately 1,100 financial institutions, servicing and custodying approximately $2.3 trillion in brokerage and advisory assets on behalf of approximately 8 million Americans. The firm provides a wide range of advisor affiliation models, investment solutions, fintech tools and practice management services, ensuring that advisors and institutions have the flexibility to choose the business model, services, and technology resources they need to run thriving businesses. For further information about LPL, please visit www.lpl.com. At LPL, independence means that advisors and institution leaders have the freedom they deserve to choose the business model, services, and technology resources that allow them to run a thriving business. They have the flexibility to do business their way. And they have the freedom to manage their client relationships, because they know their clients best. Simply put, we take care of our advisors and institutions, so they can take care of their clients. For further information about LPL, please visit www.lpl.com. Join the LPL team and help us make a difference by turning life’s aspirations into financial realities.
We need to keep the note about work authorization sponsorship only once.
We need to remove duplicated lines: The note appears twice; we keep one.
We need to remove application instructions: "Please log in or create an account to apply to this position. Principals only. EOE. Information on Interviews: ..." etc.
We also need to remove "Join the LPL team and help us make a difference by turning life’s aspirations into financial realities." maybe that's part of Company Overview; it's substantive? It's a call to action but maybe considered boilerplate? It's not legal/EEO; it's motivational. Might keep as part of Company Overview.
We need to preserve all substantive information; so we keep company overview details.
Now structure:
About the role
Build a career that matches all your initiative with an impressive dose of innovation. From cutting-edge resources and a collaborative environment to the freedom to make an impact and more, you’ll find the ingredients you need at LPL Financial to shape your success while helping clients pursue their financial goals.
Job Overview: LPL Financial is in search of a Senior Vulnerability Management Engineer who can execute and mature the existing Vulnerability Management program at LPL and its subsidiaries. As a member of the Cyber Security organization, the Senior Vulnerability Management Engineer plays a key role in securing systems built and/or used by LPL Financial. A successful candidate can expect to manage Vulnerability Scanning tools and work closely with infrastructure, cloud, engineering, and application teams, as well as third party vendors to ensure that vulnerabilities are effectively managed throughout the environment.
Please note: This position does not offer work authorization sponsorship now or in the future. Applicants must have valid U.S. work authorization that does not require employer sponsorship.
Responsibilities
- Perform as a vulnerability management SME in one or more of the following areas: Microsoft platform (Server, workstation, applications), Open Systems platforms (Linux, UNIX, VM Ware ESX), virtualization platforms (e.g. Citrix), Networking, Databases (Oracle, SQL Server, DB2, IMS), and Cloud (AWS, Azure, Google).
- Lead efforts to define/implement processes, policies, and procedures to govern vulnerability remediation efforts and track open vulnerabilities from identification to resolution, following up with remediation owners and escalating risk as necessary
- Lead and drive large initiatives with enterprise level visibility to improve the Vulnerability Management program
- Be able to successfully partner with other security and IT professionals to assess potential impact from vulnerabilities specific to LPL Financials environment, and determine and implement mitigating controls.
- Identify and recommend appropriate measures to manage and remediate vulnerabilities and reduce potential impacts on information resources to a level acceptable to the senior management of the company.
- Build strong partnerships with technical teams to promote best practices for managing vulnerabilities in an agile manner and within cloud solutions.
- Be a champion for vulnerability management and information security including broadening awareness and use of the team’s services, education of security best practices and integration with other business areas.
- Assist with the management and maintenance of vulnerability management platforms/tools, including troubleshooting and resolving technical/functional issues and ensuring successful platform operations
- Review, implement, and maintain cloud security posture
for prose. We need to preserve all substantive information, not invent or summarize away detail. Remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning, duplicated lines, application instructions. Also remove repeated "Please note: This position does not offer work authorization sponsorship..." appears twice; we should keep only once? The instruction: remove duplicated lines. So we should keep only one instance of that note. Also remove "Please log in or create an account to apply to this position." etc. Also remove "Principals only. EOE." etc. Also remove "Information on Interviews:" etc. Also remove "Company Overview" maybe we keep as it's substantive? It's about company; we can keep as a section maybe "About the Company" but heading must be from list: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. The instructions say use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). It seems we should limit to those headings. So we need to map content to those headings. "About the role" could cover Job Overview. "Responsibilities" as given. "Requirements" could cover the "What are we looking for?" and the Requirements list. "Qualifications" maybe not needed if we have Requirements. "Skills" maybe not needed. "Benefits" we have mention of Total Rewards package. "Pay" we have Pay Range. "Schedule" not present, so omit.
We should not create sections with filler. So we will include About the role, Responsibilities, Requirements, Benefits, Pay. Possibly also "Qualifications" if we have degree preferences; but we could put that under Requirements or Qualifications. The instructions: Prefer a few substantive sections over many thin ones. So we could combine degree preferences into Requirements. We'll have Requirements include experience, education, etc.
We need to preserve all substantive information: So we need to include details from Job Overview, Responsibilities bullet points, Requirements bullet points, Preferences bullet points, Pay Range, Benefits description (Total Rewards package). Also maybe include note about work authorization sponsorship (we keep once). Also maybe include Company Overview? Not in allowed headings; but we could put under About the role? But it's about company, not role. However instructions say we can use headings e.g. About the role, Responsibilities, etc. It doesn't forbid other headings but says use those for section headings. It might be okay to add other headings if needed, but better to stick to allowed. Company Overview could be considered "About the role"? Not exactly. But we could omit it as it's not required? The instruction: Preserve ALL substantive information; do NOT invent or summarize away detail. So we must keep company overview info. If we omit a section, we lose that info. So we need to include it somewhere. Could we put it under About the role? That might be okay as it's about the company but still relevant to role. Or we could add a heading "About the Company" but not in list; risk of violating instruction. The instruction: "Use for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." The e.g. suggests examples, not exclusive list. So we can use other headings as long as they are . Safer to use "About the Company". But they said e.g. About the role, Responsibilities... Might be okay to use other headings. I'll include "About the Company" as . Also we need to include "Work Authorization" note maybe as a
. Safer to use "About the Company". But they said e.g. About the role, Responsibilities... Might be okay to use other headings. I'll include "About the Company" as . Also we need to include "Work Authorization" note maybe as a
under About the role or separate. We must not include application instructions, boilerplate, duplicated lines. Let's extract content: Job Description Where Ambition Meets Innovation Build a career that matches all your initiative with an impressive dose of innovation. From cutting-edge resources and a collaborative environment to the freedom to make an impact and more, you’ll find the ingredients you need at LPL Financial to shape your success while helping clients pursue their financial goals. Please note: This position does not offer work authorization sponsorship now or in the future. Applicants must have valid U.S. work authorization that does not require employer sponsorship. Job Overview: LPL Financial is in search of a Senior Vulnerability Management Engineer who can execute and mature the existing Vulnerability Management program at LPL and its subsidiaries. As a member of the Cyber Security organization, the Senior Vulnerability Management Engineer plays a key role in securing systems built and/or used by LPL Financial. A successful candidate can expect to manage Vulnerability Scanning tools and work closely with infrastructure, cloud, engineering, and application teams, as well as third party vendors to ensure that vulnerabilities are effectively managed throughout the environment. Responsibilities: (list bullet points) What are we looking for? We want strong collaborators who can deliver a world-class client experience. We are looking for people who thrive in a fast-paced environment, are client-focused, team oriented, and are able to execute in a way that encourages creativity and continuous improvement. Requirements: 5+ years of practical experience in information security field within a large enterprise environment 5+ years of vulnerability management experience working with vulnerability management tools (e.g. Qualys, InsightVM/Rapid7, Wiz, Nessus, etc.) Preferences: Bachelors and/or Master’s Degree or in Information Security, Engineering, Computer Science.Familiar with industry standard security best practices and vulnerability management processes including identification, analysis, reporting, and remediation.Advanced level of knowledge of the major Cloud platforms, the types of resources that can be deployed within each platform, common cloud misconfigurations/vulnerabilities and how to fix such issuesIn depth understanding of types of vulnerabilities and techniques/compensating controls to mitigate associated riskExperience managing and using Cloud Security Posture Management tools such as Wiz, XPanse, Prisma, Laceworks, OrcaExperience with reviewing, analyzing, managing, and remediating security vulnerabilities and misconfigurations in cloud resourcesExperience at a financial services/technology company or in a regulated industry.Ability to communicate with both technical and non-technical stakeholders at all levels of the organization.Strong analytical, interpersonal and communication skills Pay Range: $100,631.00 - $167,787.00 Actual base salary varies based on factors, including but not limited to, relevant skill, prior experience, education, base salary of internal peers, demonstrated performance, and geographic location. Additionally, LPL Total Rewards package is highly competitive, designed to support your success at work, at home, and at play – such as 401K matching, health benefits, employee stock options, paid time off, volunteer time off, and more. Your recruiter will be happy to discuss all that LPL has to offer! Company Overview: LPL Financial Holdings Inc. (Nasdaq: LPLA) is among the fastest growing wealth management firms in the U.S. As a leader in the financial advisor-mediated marketplace(6) , LPL supports over 32,000 financial advisors and the wealth management practices of approximately 1,100 financial institutions, servicing and custodying approximately $2.3 trillion in brokerage and advisory assets on behalf of approximately 8 million Americans. The firm provides a wide range of advisor affiliation models, investment solutions, fintech tools and practice management services, ensuring that advisors and institutions have the flexibility to choose the business model, services, and technology resources they need to run thriving businesses. For further information about LPL, please visit www.lpl.com. At LPL, independence means that advisors and institution leaders have the freedom they deserve to choose the business model, services, and technology resources that allow them to run a thriving business. They have the flexibility to do business their way. And they have the freedom to manage their client relationships, because they know their clients best. Simply put, we take care of our advisors and institutions, so they can take care of their clients. For further information about LPL, please visit www.lpl.com. Join the LPL team and help us make a difference by turning life’s aspirations into financial realities. We need to keep the note about work authorization sponsorship only once. We need to remove duplicated lines: The note appears twice; we keep one. We need to remove application instructions: "Please log in or create an account to apply to this position. Principals only. EOE. Information on Interviews: ..." etc. We also need to remove "Join the LPL team and help us make a difference by turning life’s aspirations into financial realities." maybe that's part of Company Overview; it's substantive? It's a call to action but maybe considered boilerplate? It's not legal/EEO; it's motivational. Might keep as part of Company Overview. We need to preserve all substantive information; so we keep company overview details. Now structure:
About the role
Build a career that matches all your initiative with an impressive dose of innovation. From cutting-edge resources and a collaborative environment to the freedom to make an impact and more, you’ll find the ingredients you need at LPL Financial to shape your success while helping clients pursue their financial goals.
Job Overview: LPL Financial is in search of a Senior Vulnerability Management Engineer who can execute and mature the existing Vulnerability Management program at LPL and its subsidiaries. As a member of the Cyber Security organization, the Senior Vulnerability Management Engineer plays a key role in securing systems built and/or used by LPL Financial. A successful candidate can expect to manage Vulnerability Scanning tools and work closely with infrastructure, cloud, engineering, and application teams, as well as third party vendors to ensure that vulnerabilities are effectively managed throughout the environment.
Please note: This position does not offer work authorization sponsorship now or in the future. Applicants must have valid U.S. work authorization that does not require employer sponsorship.
Responsibilities
- Perform as a vulnerability management SME in one or more of the following areas: Microsoft platform (Server, workstation, applications), Open Systems platforms (Linux, UNIX, VM Ware ESX), virtualization platforms (e.g. Citrix), Networking, Databases (Oracle, SQL Server, DB2, IMS), and Cloud (AWS, Azure, Google).
- Lead efforts to define/implement processes, policies, and procedures to govern vulnerability remediation efforts and track open vulnerabilities from identification to resolution, following up with remediation owners and escalating risk as necessary
- Lead and drive large initiatives with enterprise level visibility to improve the Vulnerability Management program
- Be able to successfully partner with other security and IT professionals to assess potential impact from vulnerabilities specific to LPL Financials environment, and determine and implement mitigating controls.
- Identify and recommend appropriate measures to manage and remediate vulnerabilities and reduce potential impacts on information resources to a level acceptable to the senior management of the company.
- Build strong partnerships with technical teams to promote best practices for managing vulnerabilities in an agile manner and within cloud solutions.
- Be a champion for vulnerability management and information security including broadening awareness and use of the team’s services, education of security best practices and integration with other business areas.
- Assist with the management and maintenance of vulnerability management platforms/tools, including troubleshooting and resolving technical/functional issues and ensuring successful platform operations
- Review, implement, and maintain cloud security posture