Description

You will analyze and manage the organization's security posture.

Responsibilities

• Conduct vulnerability scans using approved tools and consolidate results from external sources.
• Maintain visibility of known vulnerabilities and track remediation progress.
• Partner with application and infrastructure teams to address identified vulnerabilities.
• Investigate recurring security issues and identify areas for large-scale remediation.
• Compile data-driven reports and key performance metrics for security tracking.

Required Skills

• 5+ years of experience in security analysis or related field.
• Strong understanding of HTTP, DNS, PKI, Encryption, SMTP, CWE, and CVE frameworks.
• Hands-on experience with scanning tools like Nessus, NMAP, ZA, BurpSuite, Invicti, or Nuclei.
• Familiarity with Web Application Firewalls (WAFs) and containerized environments.
• Knowledge of security compliance frameworks such as CIS Benchmarks or STIGs.
• Proficiency in Python or PowerShell for scripting tasks.
• Experience with Splunk for data onboarding and analysis.
• Familiarity with Azure Event Hubs or Kafka for event ingestion.
• Strong analytical and problem-solving skills with a systematic troubleshooting approach.

Preferred Skills

• Experience with SAML, Kerberos, OAuth, OIDC, or LDAP.
• Exposure to Jenkins pipelines.

Key Skills

Education

Bachelor's degree