Consultant - Vulnerability Assessment
Company
Coalfire
Location
USA
Type
Full Time
Job Description
- Work with some of the leading Cloud Service Providers (CSPs) to validate vulnerability management security posture of their products and services
- Monitor and maintain enterprise security scanning tools (Nessus, Qualys, Nexpose, Netsparker, Burp, etc.)
- Provide recommendations on remediating host-based and web application vulnerabilities
- Conduct manual validation to confirm vulnerability closure
- Perform analysis to validate justifications for false positives, operational requirements, and risk adjustments
- Provide recommendations to optimize processes and procedures related to enterprise security scanning tools
- Serve as subject matter expert for vulnerability management issue resolution
- Communicate vulnerabilities, solutions, and enterprise trends to all levels of an enterprise – both technical and non-technical resources, all the way up to the CIO
- Provide periodic reports detailing scan success, remediation efforts, and vulnerability trends
- 2-5 years of vulnerability management experience
- 2-5 years of cumulative network, application security, GRC, or cybersecurity consulting
- Experience scanning for and enumerating vulnerabilities in the GCP environment
- Demonstrated knowledge in the planning, development, coordination, implementation, and execution of a vulnerability management program
- In-depth knowledge of policies, procedures, development, and implementation of vulnerability identification, scanning, analysis, remediation tactics, and reporting within an organization
- In-depth knowledge of risk analysis and vulnerability remediation plan development
- In depth knowledge and experience of industry best practices for vulnerability management
- Expert level experience in configuring and executing within multiple vulnerability scanning tools
- Direct experience working with remediation teams and management on vulnerability remediation and security posture improvement
- Experience working in ticketing tools for remediation activities
- Familiarity with configuration baseline standards such as CIS Benchmarks or DISA STIGs
- Experience creating system inventories, boundary diagrams, and/or plans of actions and milestones (POA&M)
- Familiarity with frameworks such as FedRAMP, FISMA, SOC, ISO, HIPAA, HITRUST, etc.
- Familiarity with Cloud services such as AWS, Azure
- Experience supporting vulnerability management across IaaS, PaaS, and/or SaaS
- Experience recreating web application scanning exploits in support of finding validation
- Experience reporting to C-suite personnel on security posture

Date Posted
05/31/2024
Views
3
Similar Jobs
Solution Engineer - Ottimate
Views in the last 30 days - 0
Ottimate is a company that automates accounts payables for fastgrowing businesses They offer a cloudfirst approach for invoice management and payments...
View DetailsOnline Data Analyst - Remote Position - TELUS Digital AI Data Solutions
Views in the last 30 days - 0
This freelance opportunity allows you to work as an online data analyst from home enhancing digital maps used by millions worldwide The role involves ...
View DetailsSocial Work Care Coordinator - VNS Health
Views in the last 30 days - 0
VNS Health is a large nonprofit home and communitybased health care organization providing comprehensive care management services across acute home an...
View DetailsSpeech-language pathologist - Presence
Views in the last 30 days - 0
The job posting is for a speechlanguage pathologist SLP to provide teletherapy services participate in IEP meetings and complete case reports The idea...
View DetailsSolutions Consultant - Curai
Views in the last 30 days - 0
Curai Health is a remotefirst health tech company offering virtual urgent and primary care services powered by AI and a worldclass care team They are ...
View DetailsLead Security Engineer - Curai
Views in the last 30 days - 0
Curai Health an AIpowered virtual clinic is seeking a Lead Security Engineer to maintain infrastructure and operational security controls lead initiat...
View Details