Description

You will own security analysis and vulnerability management for systems.

Responsibilities

• Conduct vulnerability scans using approved tools and consolidate results from multiple external sources.
• Maintain visibility of all known vulnerabilities and track their remediation progress.
• Partner with application and infrastructure teams to address vulnerabilities efficiently.
• Investigate recurring security issues and identify areas for large-scale remediation.
• Compile data-driven reports and key performance metrics for security tracking.

Required Skills

• 5+ years of experience in IT Security.
• Strong understanding of HTTP, DNS, PKI, Encryption, SMTP, CWE, and CVE.
• Hands-on experience with scanning tools like Nessus, NMAP, ZAP, BurpSuite, Invicti, or Nuclei.
• Familiarity with Web Application Firewall (WAF) concepts and containerized environments.
• Knowledge of security compliance frameworks like CIS Benchmark or STIGs.
• Analytical and systematic problem-solving abilities.
• Ability to communicate technical insights clearly to cross-functional teams.

Preferred Skills

• Experience with SAML, Kerberos, OAuth, OIDC, or LDAP.
• Scripting skills in Python.
• Exposure to Jenkins pipelines and Splunk data onboarding.

Key Skills

Education

Bachelor's degree