Cyber Security Engineer-II (Threat & Vulnerability Management) @ Fico

"This is an opportunity to define, build, and shape the future of FICOs Cybersecurity and Risk Posture. As part of the Threat & Vulnerability Management team, you will collaborate across the business, IT, and client environments to secure our cloud and data center infrastructure. Your contributions will be key to strengthening FICO's defense mechanisms and enhancing our compliance posture. We're looking for a cybersecurity expert passionate about continuous improvement, cloud security, and vulnerability risk reduction. If you're someone who thrives in a fast-paced environment and wants to work on high-impact global security initiatives, this role is for you" - VP, Software Engineering.

What Youll Contribute

• Collaborate with the Cyber Security Team, business stakeholders, IT partners, and clients to manage and reduce cybersecurity risk.
• Act as a subject matter expert in vulnerability scanning, compliance monitoring, and risk reporting.
• Operate and optimize tools such as Wiz, Qualys, or similar for vulnerability scanning across cloud and on-prem environments.
• Validate, triage, and risk-rank vulnerabilities based on severity, exposure, and potential business impact.
• Drive remediation planning with Product and IT teams, and oversee patch management cycles.
• Contribute to threat & vulnerability management strategy, policy, and continuous process improvement.
• Conduct periodic risk assessments and develop mitigation strategies in line with compliance requirements.
• Monitor the evolving threat landscapeincluding zero-day exploits, vendor patches, EOL systemsand proactively update mitigation plans.
• Lead initiatives to improve configuration, cloud asset management, vulnerability and patch management practices.
• Provide documentation, reporting, and cross-functional collaboration support.

What Were Seeking

• Bachelors degree in Computer Science, Information Security, or a related field (or equivalent work experience).
• 3 6 years of hands-on experience with cloud security tools such as Wiz, Qualys, or similar vulnerability scanning platforms.
• Strong understanding of AWS infrastructure and cloud security principles.
• Working knowledge of operating system and application-level vulnerabilities and how they relate.
• Familiarity with risk-based vulnerability management and compliance frameworks.
• CISSP, CISM or equivalent certifications preferred (or willingness to obtain).
• Ability to multitask, manage complex data sets, and collaborate with diverse teams.
• Knowledge of scripting languages (e.g., Python, Bash) is a plus.
• Demonstrated experience in cloud (especially AWS) patch and configuration management.
• Familiarity with malware behavior, indicators of compromise, and modern threat vectors.
• Strong documentation, analytical, and communication skills.