Johnson Controls

What you will do:

As Analyst, Exposure Management, you will ensure the continuous identification and monitoring of vulnerabilities in the JCI Corporate infrastructure and websites and will support the IT department of Johnson Controls. The role will also identify and recommend methods and techniques to improve security posture and help establish a security culture across the various IT departments. You’ll create documentation and technical working instructions to support high-quality security operations, monitoring, and compliance in corporate environments. Supports achieving the vulnerability program objectives in the infrastructure, web application and compliance area. You will also coordinate the improvement of current automation related to the vulnerability management area.

The successful candidate will need to be knowledgeable of the concepts of security vulnerability management and IT compliance hardening and have the technical skills and communication abilities to converse with IT engineers about security vulnerabilities and support remediation. The candidate will be able to articulate thoughts clearly, run operations, plan initiatives, and execute with appropriate urgency. The candidate will demonstrate drive, intelligence, maturity, and energy and will be a proven change agent..

How you will do it:

• Coordinate and/or perform regular Infrastructural and Web Application vulnerability assessments;
• Identify, and maintain the vulnerability management corporate platform in order to prompt identify weakness in the internal and external perimeter, including Cloud infrastructure;
• Monitor the identified security vulnerabilities or missconfiguration and support the IT stakeholders for remediation;
• Enforce VM processes and procedures to ensure also the right coverage and security of the Corporate Business Infrastructure and Web Applications;
• Collaborate with GIS teams to develop or optmize automations used for vulnerability tracking and reporting;
• Support to adopt Security best practices and security standards applied by the organization.

What we look for:

Required

• Minimum 3 years working in Information Security and Security Operations area.
• Knowledge of industry best practices in Vulnerability Management and Compliance areas; (e.g. NIST and “CVSS - Common Vulnerability Scoring System” frameworks)
• Experience in management and configuration of vulnerability assessment platform (e.g Rapid7 Insight VM and AppSec, Nessus, Qualys VM and WAS, Burp Suite, ZAP)
• Experience with administration of ITSM solutions used for vulnerability tracking and reporting (Service Now SecOps VM Module/Jira)
• Experience with OWASP Top 10 assessment and methodology and CIS hardening standard;
• Experience with various cloud providers (Azure, Google, Amazon) and knowledge on methodology how to secure them;
• Experience on enforcement of VM operational Security process and procedures;
• Experience with penetration test assessment, red/blue team activities and security monitoring;
• Effective communication skills to interface with both internal and external stakeholders;
• Self-starter mentality that defaults to action and thinks creatively on how to overcome challenges;
• Good communicator, both verbally and in writing;
• Highly motivated, adaptable and willing to learn new technologies.

Preferred

• Bachelor’s degree in computer engineering, computer security or computer science discipline;
• Previous technical background in IT or Software development roles;
• Experience with Splunk SIEM Platform;
• Experience with management of Service NOW SecOps Vulnerability Response module.
• Desired Security certifications:
• Certified Information Systems Security Professional (CISSP)
• Certified Ethical Hacker (CEH)
• Offensive Security Certified Professional (OSCP)
• CompTIA Security+
• Qualys Certified Specialist
• Burp Suite Certified Practitioner

Our benefits

Besides working in an international environment, you will receive a regularly monthly bonus after your first six months, meal vouchers, a recreation allowance and retail discounts. Additionally, our flexible benefits program will allow you to customize benefits from a selection of 3500 products and service such as gym membership, medical cover, a multi-sports card plus many more.

Our onsite facilities at our Bratislava based office includes a canteen, nursery and coffee machines located on every floor.

If you are relocating to Bratislava to join Johnson Controls, you will be eligible to receive a housing allowance to help you setup your new life in Slovakia.

The gross monthly salary for this position starts from 2,000 EUR per month, plus a monthly bonus that starts after your first 6 months. Please note this is a minimum salary and our compensation packages are based on your professional experience and qualifications.

Our culture

At Johnson Controls you’ll have the opportunity to work on some of the most exciting projects in today’s market. Our hardworking people empower us, and we believe in being part of a team that is open, collaborative, results-oriented, hardworking and above all fun.

We believe that diversity and inclusion matter and make a difference. By embracing the true value of diversity and inclusion, getting comfortable with having crucial conversations, and valuing different perspectives, we will be one of the most desirable places to work.