Be an Early Applicant
Empowering Investor Success
The Role
The role involves analyzing cybersecurity vulnerabilities, providing remediation strategies, creating reports, mentoring junior staff, and collaborating on risk management.
Summary Generated by Built In
About the Role
We are looking for a colleague to join our Remediation Operations team. The role is responsible for analyzing data collected from various cybersecurity defense tools to mitigate risks and partner with relevant stakeholders to support remediation operations.
Job Responsibilities
Qualifications
Nice to have
Base Salary Compensation Range
$90,489.00-132,711.00
Incentive Target Percentage
12.5% Annual
Morningstar's hybrid work environment gives you the opportunity to collaborate in-person each week as we've found that we're at our best when we're purposely together on a regular basis. In most of our locations, our hybrid work model is four days in-office each week. A range of other benefits are also available to enhance flexibility as needs change. No matter where you are, you'll have tools and resources to engage meaningfully with your global colleagues.
100_MstarResCanad Morningstar Research, Inc. (Canada) Legal Entity
We are looking for a colleague to join our Remediation Operations team. The role is responsible for analyzing data collected from various cybersecurity defense tools to mitigate risks and partner with relevant stakeholders to support remediation operations.
Job Responsibilities
- Analyze technical vulnerabilities to determine the real impact to Morningstar systems. Review security vulnerabilities across a variety of technologies and environments to determine high risk vulnerabilities to business assets.
- Provides technical vulnerability analysis and remediation options.
- Staff the Enterprise-wide vulnerability management program, collaborating with partners to coach and support remediation operations while providing technical guidance and tracking resolution progress.
- Give real, actionable remediation advice above and beyond what the tools and testers provide.
- Create reports related to vulnerability management KPIs.
- Generate detailed security reports and metrics to communicate risk status and remediation progress to key stakeholders.
- Assist with documenting and regularly reviewing relevant processes and procedures.
- Train, mentor and guide junior colleagues.
Qualifications
- A bachelor's degree in computer science or related field.
- Previous experience in information security (3+ years), with a minimum of 1 year in vulnerability management area.
- Knowledge of risk management processes.
- Previous experience with vulnerability assessment tools and techniques, vulnerability data sources, system threats and vulnerabilities.
- Basic understanding of attacker tactics, techniques, and procedures.
- Ability to understand code and configuration as it relates to security vulnerabilities.
- Capability to recognize and categorize types of vulnerabilities.
- Understanding of enterprise-scale infrastructure, technologies, and applications, both on-premises and in the public cloud.
- Strong communication skills.
- Ability to teach, influence, and adapt as new information becomes available.
- Enthusiasm to learn and gain hands-on experience across different security domains.
- Commitment to working as part of team to deliver a significant and measurable impact on security vulnerability risk.
Nice to have
- Knowledge of encryption algorithms, tools and techniques.
- Knowledge of programming language structures and logic.
- Understanding of cybersecurity laws and regulations, models and frameworks.
- Experience with cyber defense and hardening tools and techniques.
- Previous experience in penetration testing tools, principles and practices.
Base Salary Compensation Range
$90,489.00-132,711.00
Incentive Target Percentage
12.5% Annual
Morningstar's hybrid work environment gives you the opportunity to collaborate in-person each week as we've found that we're at our best when we're purposely together on a regular basis. In most of our locations, our hybrid work model is four days in-office each week. A range of other benefits are also available to enhance flexibility as needs change. No matter where you are, you'll have tools and resources to engage meaningfully with your global colleagues.
100_MstarResCanad Morningstar Research, Inc. (Canada) Legal Entity
Top Skills
Cybersecurity Tools
Encryption Algorithms
Programming Languages
Vulnerability Assessment Tools
What the Team is Saying
Anna
Team Lead of Software Engineering
Upasna
Software Engineer, Data Collections - AI R&D
Saurabh
Senior Software Engineer
Wendell
Head of Sales, Institutional Equity Research
Raaghavendar
Associate Software Engineer
Jeff
Head of Technology and Product
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
At Morningstar, we believe in building great products in-house in a highly collaborative, agile environment where we focus on technical excellence, the user experience, and continuous improvement. Our technologists represent a range of skills and experience levels, but they all view their work as a craft and push technology’s boundaries.
Why Work With Us
Imagining big things is in our blood -- it's transformed us from a company with just a few employees in 1984 to a leading independent investment research company with a worldwide presence today. As of April 2020, we acquired Sustainalytics to drive long-term meaningful outcomes for investors in the ESG space. Join us on this exciting journey!
Gallery
Morningstar Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
Typical time on-site:
3 days a week
