Job Description
- Work with some of the leading Cloud Service Providers (CSPs) to validate vulnerability management security posture of their products and services
- Monitor and maintain enterprise security scanning tools (Nessus, Qualys, Nexpose, Netsparker, Burp, etc.)
- Provide recommendations on remediating host-based and web application vulnerabilities
- Conduct manual validation to confirm vulnerability closure
- Perform analysis to validate justifications for false positives, operational requirements, and risk adjustments
- Provide recommendations to optimize processes and procedures related to enterprise security scanning tools
- Serve as subject matter expert for vulnerability management issue resolution
- Communicate vulnerabilities, solutions, and enterprise trends to all levels of an enterprise – both technical and non-technical resources, all the way up to the CIO
- Provide periodic reports detailing scan success, remediation efforts, and vulnerability trends
- 2-5 years of vulnerability management experience
- 2-5 years of cumulative network, application security, GRC, or cybersecurity consulting
- Experience scanning for and enumerating vulnerabilities in the GCP environment
- Demonstrated knowledge in the planning, development, coordination, implementation, and execution of a vulnerability management program
- In-depth knowledge of policies, procedures, development, and implementation of vulnerability identification, scanning, analysis, remediation tactics, and reporting within an organization
- In-depth knowledge of risk analysis and vulnerability remediation plan development
- In depth knowledge and experience of industry best practices for vulnerability management
- Expert level experience in configuring and executing within multiple vulnerability scanning tools
- Direct experience working with remediation teams and management on vulnerability remediation and security posture improvement
- Experience working in ticketing tools for remediation activities
- Familiarity with configuration baseline standards such as CIS Benchmarks or DISA STIGs
- Experience creating system inventories, boundary diagrams, and/or plans of actions and milestones (POA&M)
- Familiarity with frameworks such as FedRAMP, FISMA, SOC, ISO, HIPAA, HITRUST, etc.
- Familiarity with Cloud services such as AWS, Azure
- Experience supporting vulnerability management across IaaS, PaaS, and/or SaaS
- Experience recreating web application scanning exploits in support of finding validation
- Experience reporting to C-suite personnel on security posture
Date Posted
05/31/2024
Views
3
Similar Jobs
Engineering Manager - Software Supply Chain Security: Auth Infrastructure - GitLab
Views in the last 30 days - 0
This job description highlights a leadership role in developing secure scalable authentication infrastructure for GitLab It emphasizes technical exper...
View DetailsStaff Salesforce Engineer - CRM Systems - GitLab
Views in the last 30 days - 0
This job description outlines a Staff Salesforce Developer role focusing on designing building and scaling enterprisegrade solutions across Salesforce...
View DetailsGrowth Product Lead - Loyalty - Trafilea
Views in the last 30 days - 0
Trafilea promotes itself as a transformative consumer tech platform with AIdriven growth solutions highlighting achievements like 1B revenue and globa...
View DetailsSales Prospecting Account Executive - Financial Solutions - Blackbaud
Views in the last 30 days - 0
This job posting seeks Prospect Account Executives to sell Financial Management applications for nonprofits and governments Responsibilities include s...
View DetailsSolutions Architect - phData
Views in the last 30 days - 0
This job posting seeks a Solutions Architect to join phDatas Elastic Platform Operations team focusing on cloudnative data platforms like Snowflake AW...
View DetailsTeam Lead - Publisher Success Management (AdTech) - MGID
Views in the last 30 days - 0
MGID is a fastgrowing digital advertising company seeking a resultsdriven Team Lead to oversee client relationships and drive business growth in the U...
View Details