At eBay, we're more than a global ecommerce leader — we’re changing the way the world shops and sells. Our platform empowers millions of buyers and sellers in more than 190 markets around the world. We’re committed to pushing boundaries and leaving our mark as we reinvent the future of ecommerce for enthusiasts.
Our customers are our compass, authenticity thrives, bold ideas are welcome, and everyone can bring their unique selves to work — every day. We're in this together, sustaining the future of our customers, our company, and our planet.
Join a team of passionate thinkers, innovators, and dreamers — and help us connect people and build communities to create economic opportunity for all.
Looking for a company that inspires passion, courage and creativity, where you can be on the team shaping the future of global commerce? Want to shape how millions of people buy, sell, connect, and share around the world? If you’re interested in joining a purpose driven community that is dedicated to crafting an ambitious and inclusive work environment, join eBay – a company you can be proud to be with.
The Global Information Security team is responsible for performing Cybersecurity vulnerability management activities for eBay Payments, Marketplaces, Corporate IT, and adjacent businesses. The Vulnerability Management Engineer will play a critical role working directly with business and technology teams to identify, report and provide remediation support to business and technology teams for cybersecurity vulnerabilities. You will partner across the organization to drive teamwork and response on new vulnerabilities and threats impacting eBay and be able to organize teams and remediation actions quickly to minimize impact. Additionally you will run and improve the vulnerability management program operations including working with junior level team members to carry out the program chart
Run operations for the Cybersecurity vulnerability program to ensure effective delivery of assessments; solutions; remediation; business unit level reporting; process improvements; and documentation.
Establish and prioritize security vulnerability assessment activities including integration into Depop and eBay's software development lifecycle.
Communicate security vulnerability risks to business and technology teams and leaders to ensure a clear understanding of these risks and guidance on how to remediate them.
Track all vulnerability remediation efforts and drive accountability across the organization for remediation. Escalate issues and problems when needed.
Assess current and emerging threats, cyber attacks and zero-day vulnerabilities that pose risks to Depop and eBay.
Provide execution in maturing the vulnerability management program to meet the ongoing needs of the business and regulatory obligations. Support compliance and risk management activities.
Ensure alignment to eBay’s security policies, standards, and methodologies.
Communicate and present key security vulnerability initiatives, practices, and issues to business units.
Establish, monitor, and report Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) and metrics for the Security Vulnerability Program.
Leverage or implement security tools to improve monitoring functions and drive automation and efficiencies.
Identify and apply industry resources and Global Information Security domain guides to develop industry leading security vulnerability management solutions and approaches.
Must be able to interface and coordinate work efficiently and effectively with business colleagues and vendors in global locations and time zones.
5+ years of demonstrated ability within information security vulnerability management including the remediation process to address operating system and application vulnerabilities.
Experience using ServiceNow including sophisticated features within ServiceNow; Kubernetes environments that include building, deploying and deleting containerized images; and industry standard development release processes including the use of development pipelines, GitHub and other common release management tools.
Deep technical understanding of infrastructure security vulnerability management requirements and solutions, as well as threats and challenges impacting the protection of information across an extended global enterprise.
Capable of flexing between high level strategic concepts & frameworks to tactical operational implementation.
Self-starter with a bias towards action and can thrive in a fast-paced and ambiguous environment.
Exceptional interpersonal skills including clear and concise writing, an engaging presentation style, and group facilitation.
Strong partnership skills with a demonstrable ability to collaborate across teams and roles.
Must be able to interface, influence, and coordinate work efficiently and effectively with business colleagues in multiple locations at all levels.
Strong analytical, organizational and decision making skills.
Ability to quickly learn new environments and technologies.
Experience with security vulnerability management tools a plus (e.g. Qualys, Tenable, and Anchore).
Additional Details
eBay is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, sexual orientation, gender identity, veteran status, and disability, or other legally protected status. If you have a need that requires accommodation, please contact us at [email protected]. We will make every effort to respond to your request for accommodation as soon as possible. View our accessibility statement to learn more about eBay's commitment to ensuring digital accessibility for people with disabilities.
We use cookies to enhance your experience and may use AI tools for administrative tasks in the hiring process. To learn how we handle your personal data and use AI responsibly, please visit our Talent Privacy Notice, Privacy Center, and AI Hiring Guidelines.
