Overview /Objective

NFL is seeking a highly skilled Senior Information Security Professional responsible for identifying, isolating, and resolving advanced threats in the NFL’s network by actively searching for vulnerabilities and mitigation of cybersecurity risks that affect the organization.

This resource will join the Vulnerability Threat Management Team in a mission critical capacity as our Vulnerability/Threat Management Associate, responsible for implementing a proactive approach to identify unknown, undetected, and non-remediated cyber threats in the NFL’s networks thereby strengthening cybersecurity posture through scanning, research, threat simulations, and threat hunting engagements.  

The NFL League Office has returned to  office in a 4/1 hybrid capacity, offering 4 virtual remote days each month that can be accrued by Associates, with the remaining days working onsite in our facilities.  This role can be onsite at any of our three offices:  Mount Laurel NJ, New York NY, or Inglewood, CA.    

Responsibilities

• Manage the Vulnerability Management program as a leader and subject matter expert from end-to end across VM lifecycle.
• Maintain awareness of new and upcoming vulnerabilities and coordinate across teams to determine the impact.
• Develop Threat Model and proactively and iteratively search through systems and networks to detect advanced threats.
• Influence the development of vulnerability management standards and security policies.
• Recommend and assist with development of new security controls to address findings to include signatures, alerts, workflows, and automation.
• Identify security risks, threats, misconfigurations and vulnerabilities of existing networks, systems, applications and assist in developing solutions to remediate identified threats.
• Analyze identified malicious network and system log activity to determine weaknesses, exploitation methods.
• Establish and drive metrics, analytics, reporting, and a roadmap for continual program improvement through executive summaries and in-depth technical reports.
• Develop and maintain automated situational awareness dashboards for leadership and system owners.
• Assist and support the Cybersecurity Operations Manager in incident handling/investigations.
• Coordinate with the NFL technology engineering and management teams to resolve the cyber threats and patch the security systems.

Required Qualifications

• Proven experience building, leading and growing a Vulnerability/Threat Management function.
• Solid working knowledge of use scanning and threat detection technologies such as Endpoint Detection and Response, Security Information and Event Management (SIEM), VM scanners, and related security and asset tools.
• Broad, strong technical expertise in network protocols, vulnerability management processes, Windows and Linux based systems, enterprise network security products.
• Ability to analyze architectural documents.
• Experience consuming and analyzing Cyber Threat Intelligence tools.
• Experience working with various technologies and platforms such as AWS, Azure, O365, containers, etc.
• Understanding current cyber threat landscape, the different tactics commonly used by adversaries and how one would investigate, contain, and recover against their attacks.
• Familiarity with scripting languages such as Python, Ruby, Shell, Bash, Perl are a plus.

Other Key Attributes / Characteristics

• The candidate should possess excellent problem-solving skills with a proactive approach to identifying and addressing security vulnerabilities.
• Excellent team player with ability to effectively collaborate with cross-functional teams and communicate technical information.
• Must have excellent technical writing skills.

Terms / Expected Hours of Work

• Required to work 40 hours per week.
• Contract role (ongoing) with benefit package through NFL Atrium program. 
• Weekly compensation of $3250 -$3650.
• Onsite in a 4/1 hybrid set up in one of our three facilities.  
• Travel not required.

Salary / Pay Range

This job posting contains a pay range, which represents the range of salaries or hourly rates that the NFL believes, in good faith, at the time of this posting that it might be willing to pay for the posted job in the location(s) specified. The NFL expects to hire for this position near the middle of the range. Only in truly rare and exceptional circumstances, where an external candidate has experience, credentials or expertise that far exceed those required or expected for the position, would the NFL consider paying a salary or rate near the higher end of the range.

Related jobs

Associate Director, Agency & Advertisers Nielsen Seoul, South Korea

Security Associate AMB Sports & Entertainment AMB Family Office

Part Time Security Associate AMB Sports & Entertainment AMB Family Office

Administrative Security Associate (External Agency Staff) National Football League (NFL) New York, New York, United States