Cyber Security Expert

Cyber Security Expert (Offensive / Vulnerability Management)

Group: Mercedes-Benz Group AG

Description

**Cyber Security Expert (Offensive / Vulnerability Management)**:Mercedes-Benz Canada needs stars like you

**What it means to be a star**

Without the stars that represent a team, a brand alone is incomplete.

Mercedes-Benz Canada represents not only the world’s oldest automotive brand, but one that is at the cutting-edge of sustainability, design, technology, fashion and popular culture.

The iconic three-pointed star is always looking for the best and brightest to support its growth as a true luxury brand.

We are seeking individuals who want to be in the driver’s seat of this transformation, working alongside talented colleagues who represent the Mercedes-Benz values and who are ready to add their talent to the brand’s ever-evolving story.

**How your role will add to the story**:
We’re looking for a Cyber Security Expert (Offensive / Vulnerability Management) to join our Global Cyber Security team. This team identifies and prioritizes all vulnerabilities in our environment and provides respective reports to key stakeholders. If you are passionate about Information Security and want to develop solutions that will secure our enterprise across all Mercedes-Benz lines of business, then we want to talk to you.

**A day in the life**
- Collaborate on and enforce the implementation of Mercedes-Benz’s global Vulnerability Management (VM) strategy.
- First point of contact for the NAFTA and LATAM region for questions around VM, including vulnerability scanning and penetration testing.
- Perform vulnerability scans in the company’s internal networks.
- Analyze, rate and confirm vulnerabilities reported by external researchers.
- Rate new technical vulnerabilities according to their business impact and prioritize remediation activities.
- Please note: The nature of this position is a technical security function, not a compliance function.

**Testimonials from several Mercedes-Benz Canada stars, from an intern to an executive**:
“Mercedes-Benz is more than a car brand; it’s a futuristic, technological brand continuing to research and evolve its strategy as a digital and luxurious company, all while championing sustainable initiatives.”

“This company grants its members the opportunity to professionally grow and discover the extent of the brand and its presence in all countries. You are granted the opportunity to drive innovation in several sectors, as this company allows you to take your career wherever you like with our very robust framework of opportunities, whether it’s rotations, international assignments, education programs and more.”

“As an intern, I feel a great sense of responsibility and accountability at Mercedes-Benz. The high level of responsibility and contribution found in our internship programs is unlike my experience anywhere else.”

“Most people, if not everyone, seek a great balance of life at work and outside of it. At Mercedes-Benz, not only does your work life grant you exciting opportunities, but you are also afforded great understanding of your time outside of work - including the right to disconnect.”

“Working for Mercedes-Benz, it’s certainly the brand and the pillars - but at the end of the day, once you’re in, it’s about the people, the experience, diverse cultures and backgrounds, everyone’s experience driving in one direction.”

**Qualifications**:
**Mercedes-Benz Star skills, requirements & traits**:

- BA/BS or MS Degree in Computer Science or 5+ years of industry experience.
- 3+ years working experience in technical cyber security related field in a corporate, military, or law enforcement environment.
- Excellent knowledge of cyber security standards, risks, threats, prevention measures, and best practices.
- Experiences in improving a vulnerability management process and/or a vulnerability-scanning concept in an enterprise environment.
- Hands-on experience with vulnerability scanning and management processes and tools like Qualys, ServiceNow Vulnerability Response.
- Experience with vulnerability management in cloud solutions.
- Hands-on experience with programming / scripting languages, e.g. Python, bash, ruby.
- At least one of the following certifications or a similar one will be a plus:

- Offensive Security Certified Professional (OSCP)
- Offensive Security Certified Expert (OSCE)
- CREST
- SANS GIAC Penetration Tester, Web Application Penetration Tester, Exploit Researcher and Advanced Penetration Tester.
- Honest and professional, strong team influencer, able to proactively support team culture that fosters knowledge sharing, excellence and collaboration.
- Able to work under pressure, facilitate discussion, decision-making, and conflict resolution.
- Excellent communicator, able to engage and effectively respond to diverse stakeholders.
- English fluent; German will be a plus.
- Bold, innovative and enjoy challenging your