Vulnerability Management Analyst

Introduction
In this role you’ll work in one of our IBM Consulting Client Innovation Centers (Delivery Centers) where we deliver deep technical and industry expertise to a wide range of public and private sector clients around the world.​ Our delivery centers offer our clients locally based skills and technical expertise to drive innovation and adoption of new technology.

A career in IBM Consulting is rooted by long-term relationships and close collaboration with clients across the globe.

You’ll work with visionaries across multiple industries to improve the hybrid cloud and AI journey for the most innovative and valuable companies in the world. Your ability to accelerate impact and make meaningful change for your clients is enabled by our strategic partner ecosystem and our robust technology platforms across the IBM portfolio; including Software and Red Hat.

Curiosity and a constant quest for knowledge serve as the foundation to success in IBM Consulting. In your role you’ll be encouraged to challenge the norm investigate ideas outside of your role and come up with creative solutions resulting in ground breaking impact for a wide network of clients. Our culture of evolution and empathy centers on long-term career growth and development opportunities in an environment that embraces your unique skills and experience.

Your Role and Responsibilities
As a Vulnerability Management Analyst you’ll provide consulting services to analyze and resolve security incidents and to work with the client to achieve an overall superior security posture. Your responsibilities may encompass:

• Responsible for conducting Vulnerability Assessment and Management
• Perform Vulnerability Lifecycle Management from Asset Discovery Vulnerability Assessment or scanning Prioritization Reporting Remediation & Monitoring and Improvement
• Application of risk mitigation planning Vulnerabilities remediation recommendation & guidance Compliance & Metrics reporting
• Implementation of P.I.C.E.R.L (e.g. Preparation Identification Containment Eradication Recovery and Lessons learned) framework in managing an incident.
• Perform Security requirements analysis for application & implementation of recommendations & guidance

Required Technical and Professional Expertise

• Hands-on experience on Qualys tool
• Experience on Vulnerability Lifecycle Management
• Experience with Vulnerability Assessment
• Knowledge on Windows Security and Network Security concepts
• Experience in implementing P.I.C.E.R.L (e.g. Preparation Identification Containment Eradication Recovery and Lessons learned) framework

Preferred Technical and Professional Expertise

• Experience in Threat Hunting & Threat Intelligence.
• Experience or exposure on the following Security tools: QRadar Trellix TrendMicro ESET
• Experience on SIEM system architecture design implementation system integration and troubleshooting​