IT Security Technical Lead
Tampa, FL · On-site
Conduct network penetration testing for PCI environment using CoreImpact (Fortra) or similar tools to validate security controls and achieve regulatory compliance. Qualifications Required Work ...
IT Security Technical Lead
Tampa, FL · On-site
Conduct network penetration testing for PCI environment using CoreImpact (Fortra) or similar tools to validate security controls and achieve regulatory compliance. Qualifications Required Work ...
Fortra information
What are the key skills and qualifications needed to thrive as a cybersecurity professional at Fortra, and why are they important?
To thrive as a cybersecurity professional at Fortra, you need a solid understanding of information security principles, threat analysis, and risk management, often supported by a degree in computer science or a related field and certifications like CISSP or CEH. Familiarity with security tools such as SIEM platforms, vulnerability scanners, and Fortra’s suite of cybersecurity products is typically required. Strong analytical thinking, attention to detail, and clear communication skills distinguish top performers in this role. These capabilities are crucial for effectively identifying threats, safeguarding systems, and collaborating with teams to maintain organizational security.
What is the difference between Fortra vs Cybersecurity Analyst?
| Aspect | Fortra | Cybersecurity Analyst |
|---|---|---|
| Credentials | Certifications like CISSP, CISA, or vendor-specific security certifications | Certifications such as CompTIA Security+, CISSP, CEH |
| Work Environment | Security software development, threat management, and security solutions | Monitoring, analyzing, and responding to security incidents |
| Industry Usage | Used by security vendors and organizations implementing security tools | Employed across various industries to protect IT infrastructure |
While Fortra focuses on developing security solutions and tools, a Cybersecurity Analyst actively monitors and responds to security threats. Both roles require security certifications and are integral to cybersecurity efforts, but Fortra is a company or product, whereas a Cybersecurity Analyst is a professional role within the industry.
What is Fortra?
Fortra, formerly known as HelpSystems, is a cybersecurity and IT operations company that provides a range of software solutions designed to help organizations protect their data, automate IT processes, and enhance security. Their offerings include data protection, email security, vulnerability management, and secure file transfer products. Fortra serves industries such as healthcare, finance, manufacturing, and government, helping clients improve efficiency while maintaining robust security standards.
How does a professional at Fortra typically collaborate with cross-functional teams to deliver security solutions?
At Fortra, professionals frequently work alongside cross-functional teams, including product managers, software developers, and cybersecurity analysts, to design and implement robust security solutions. Collaboration often involves regular project meetings, shared documentation, and agile workflows to ensure seamless communication and alignment on project goals. This teamwork not only enhances problem-solving and innovation but also provides opportunities to learn from colleagues with diverse expertise, making the work environment dynamic and supportive.
What are popular job titles related to Fortra jobs in Florida?
For Fortra jobs in Florida, the most frequently searched job titles are:
What job categories do people searching Fortra jobs in Florida look for?
The top searched job categories for Fortra jobs in Florida are:
What cities in Florida are hiring for Fortra jobs?
Cities in Florida with the most Fortra job openings:
ExamOne rating
6.6
Based on 9 frontline employees who took The Breakroom Quiz
97th of 120 rated laboratories
Job description
- IT Security Technical Lead - Vulnerability Management responsible for developing, leading, and continuously improving the enterprise-wide Vulnerability Management and Security Assessment program
- This role ensures that vulnerability management across systems, applications, and clouds are identified, assessed, prioritized, and remediated alignment with business risk and compliance objectives.
- The successful candidate will combine technical expertise, strategic oversight, and leadership skills to drive a measurable reduction in organizational risk while supporting Quest Diagnostics mission to protect data, systems, and customer
Responsibilities
- Lead the global Vulnerability Management program, including policy management, scanning, reporting, and remediation tracking.
- Design and maintain a comprehensive Vulnerability Management framework aligned with NIST, HIPAA, PCI, SOX, & etc.
- Lead rapid assessment and remediation efforts for Zero day vulnerabilities, including immediate impact analysis, exploitability review, and prioritization based on business risk.
- Server as Subject Matter Expert (SME) for Qualys, or similar scanning platforms - ensuring accurate detection, prioritization, and reporting of vulnerabilities.
- Partner and Infrastructure, Application, and Risk Teams to coordinate assessment and remediation activities across diverse environments.
- Define and monitor metrics and KPIs to evaluate program effectiveness and communicate progress to Senior leadership.
- Develop and maintain dashboard and reports highlighting trends, remediation SLA performance and residual risk posture
- Conduct ad-hoc vulnerability assessments and provide risk-based recommendations for remediation and mitigation
- Provide consultancy and guidance on Vulnerability risk, Security exception, and compensating controls to technical and business stakeholders.
- Support security compliance efforts by ensuring timely remediation of vulnerabilities tied to audit findings and regulatory frameworks (HIPAA, PCI, SOX).
- Develop and deliver training, workshops, and awareness sessions to improve understanding and accountability across teams.
- Continuously evaluate and implement process and automation improvement to enhance efficiency and reporting accuracy.
- Conduct network penetration testing for PCI environment using CoreImpact (Fortra) or similar tools to validate security controls and achieve regulatory compliance.
Qualifications
Required Work Experience:
- Bachelor's degree in computer science information security, or related discipline
- Minimum 7 years if experience in IT Security, including 3+ years leading a Vulnerability or Threat management program
- Proven experience with Qualys, Tenable, Wiz or equivalent vulnerability management tools.
- Hands on experience performing network penetration testing for PCI environments or equivalent
- Strong understanding of CVSS, CVE, & CWE
- Familiarity with remediation strategies across Windows, Linux Network, and Cloud environments
- Excellent Communication and stakeholder management skills with ability to convey risk to both technical and non-technical audiences.
- Certifications such as CISSP, CISM, CISA, GPEN, or Qualys VMDR specialist
- Experience in regulated industries (Healthcare, Financial or Life Sciences)
- Familiarity with ServiceNow, Archer, or similar GRC platforms for exception and risk tracking
- Experience leading and mentoring security engineers, specialists, or analysts.
Preferred Work Experience:
- Develop and maintain custom scripts and API integrations to automate and streamline reporting and remediation workflows.
- Leverage Qualys CAR (Custom Assessment and Remediation) and optimize for efficient remediation and scanning.
About the Team
Quest Diagnostics honors our service members and encourages veterans to apply.
While we appreciate and value our staffing partners, we do not accept unsolicited resumes from agencies. Quest will not be responsible for paying agency fees for any individual as to whom an agency has sent an unsolicited resume.
Equal Opportunity Employer: Race/Color/Sex/Sexual Orientation/Gender Identity/Religion/National Origin/Disability/Vets or any other legally protected status.