Security Controls Engineer

Responsibilities

• Translate legal, regulatory, and security framework obligations into prioritized, testable tasks for engineering teams
• Define technical control requirements for vulnerability detection, remediation SLAs, and SBOM management
• Drive the end-to-end vulnerability management lifecycle across infrastructure, cloud, applications, and containers
• Integrate security scanning (SAST, DAST, SCA) into CI/CD pipelines
• Coordinate work across security domains and DevOps/Platform teams to drive adoption
• Build delivery plans, track milestones, and manage dependencies using Jira or Azure Boards
• Develop actionable dashboards for senior leadership regarding vulnerability aging and SLA compliance
• Map vulnerability management practices to regulatory frameworks and collect audit evidence

Requirements

• 3+ years of experience in vulnerability management, security engineering, or security program delivery
• Experience in cloud/software environments (AWS, Azure, or GCP)
• Working understanding of regulatory frameworks such as ISO 27001, NIS2, SOC 2, GDPR, or PCI DSS
• Proficiency with work tracking tools like Jira or Azure DevOps
• Understanding of modern SDLC and DevOps practices including CI/CD and IaC
• Strong ability to translate policy language into developer-ready user stories and remediation tasks

Preferred Qualifications

• Degree in Information Technology or a related field with a focus on cybersecurity
• Experience with container security and cloud configuration scanning

About the Company

Gen is a global company dedicated to powering Digital Freedom through trusted consumer brands including Norton, Avast, LifeLock, and MoneyLion, serving nearly 500 million users worldwide.