Description

You will own security analysis and vulnerability management for the infrastructure.

This role is on-site.

Responsibilities

• Conduct vulnerability scans using approved tools and consolidate results from multiple external sources.
• Maintain visibility of all known vulnerabilities and track their remediation progress.
• Partner with application and infrastructure teams to address vulnerabilities efficiently.
• Investigate recurring security issues and identify areas for large-scale remediation.
• Compile data-driven reports and key performance metrics for security tracking.

Required Skills

• 5+ years of experience in an IT Security role.
• Bachelor’s degree in Information Technology or related field.
• Strong understanding of HTTP, DNS, PKI, Encryption, SMTP, CWE, and CVE.
• Hands-on experience with scanning tools like Nessus, NMAP, ZAP, BurpSuite, Invicti, or Nuclei.
• Familiarity with Web Application Firewalls (WAFs) and containerized environments.
• Knowledge of CIS Benchmark or STIG security compliance and hardening frameworks.
• Analytical and systematic problem-solving skills.
• Ability to communicate technical insights clearly with cross-functional teams.

Preferred Skills

• Scripting skills in PowerShell or Python.
• Experience with SAML, Kerberos, OAuth, OIDC, or LDAP.
• Familiarity with Jenkins pipelines and Splunk data onboarding.

Key Skills

Education

Bachelor's degree