Gen Digital
Security Controls Engineer
About this role
Gen seeks a Security Controls Engineer to design and operationalize vulnerability management programs across security and DevOps teams. You'll translate regulatory requirements into actionable security controls, manage the end-to-end vulnerability lifecycle, and drive compliance reporting—bridging security strategy with engineering execution.
What you'll do
- Translate legal and regulatory frameworks (including Cyber Resiliency Act) into prioritized technical control requirements for vulnerability detection, remediation, and SBOM management
- Own the complete vulnerability management lifecycle including scanning, triage, risk-based prioritization, remediation tracking, validation, and closure across infrastructure and applications
- Integrate security scanning (SAST, DAST, SCA, container, IaC) into CI/CD pipelines with automated ticketing and SLA tracking
- Coordinate implementation across multiple security domains and DevOps teams to ensure consistent adoption of security controls
- Build delivery plans, track milestones, manage dependencies, and maintain centralized project tracking in tools like Jira or Azure Boards
- Develop dashboards and metrics reporting vulnerability aging, SLA compliance, backlog trends, and risk exposure to senior leadership
What they're looking for
- Vulnerability management and vulnerability lifecycle operations
- Security controls design and implementation across cloud/infrastructure environments
- Regulatory compliance frameworks (SOC 2, ISO 27001, Cyber Resiliency Act, etc.)
- CI/CD pipeline security integration and secure development practices
- Risk assessment and prioritization (CVSS, exploitability analysis)
- Project management, cross-functional coordination, and stakeholder communication
- Security scanning tools (SAST, DAST, SCA, container scanning)
- Metrics, reporting, and dashboard development for security programs
Benefits
- Flexible working options and time off
- Competitive pay and well-being programs
- Career growth opportunities within a global cybersecurity leader
- Collaborative team culture with emphasis on continuous learning
- Exposure to cutting-edge security and DevOps practices at scale
Opens the application — the Jobs AI extension fills it for you. Set up autofill
Opens the official application on the employer’s site. No login required.
Gen Digital
Gen Digital builds cybersecurity and financial wellness platforms that leverage machine learning for customer growth and retention. The company is hiring Machine Learning Engineers to develop and deploy AI models, and Security Controls Engineers to design vulnerability management and security operations programs.
- Website
- gendigital.com
Likely interview questions
- Describe a vulnerability management program you've built or improved—what was your approach to prioritization and SLA enforcement?
- How have you translated regulatory or compliance requirements into actionable security controls for engineering teams?