Description

You will analyze and manage the organization's security posture by conducting vulnerability scans, tracking remediation, and investigating recurring issues.

This role is on-site.

Responsibilities

• Conduct vulnerability scans using approved tools and consolidate results from external sources.
• Maintain visibility of known vulnerabilities and track remediation progress across the infrastructure.
• Partner with application and infrastructure teams to address identified vulnerabilities and resolve recurring security issues.
• Compile data-driven reports and key performance metrics for security tracking and large-scale remediation planning.

Required Skills

• 5+ years of experience in security analysis or a related field.
• Strong understanding of HTTP, DNS, PKI, Encryption, SMTP, CWE, and CVE frameworks.
• Hands-on experience with scanning tools like Nessus, NMAP, ZA, BurpSuite, Invicti, or Nuclei.
• Familiarity with Web Application Firewalls (WAFs) and containerized environments.
• Knowledge of security compliance frameworks such as CIS Benchmarks or STIGs.
• Proficiency in Python or PowerShell for scripting tasks.
• Experience with Splunk for data onboarding and analysis.
• Familiarity with Azure Event Hubs or Kafka for event ingestion.

Preferred Skills

• Experience with SAML, Kerberos, OAuth, OIDC, or LDAP.
• Exposure to Jenkins pipelines.

Key Skills

Education

Bachelor's degree