Description

Lead vulnerability management, penetration testing, and security research as a technical escalation point.

This role is on-site.

Responsibilities

• Lead vulnerability management lifecycles from detection to remediation aligned with NIST CSF, ISO 27001, SOC 2, and CMMC frameworks.
• Act as the Tier 3 escalation point for complex security issues involving patching, vulnerability management, and penetration testing.
• Plan and conduct penetration testing engagements across network and application environments.
• Define and document service workflows, standard operating procedures (SOPs), and KPIs to ensure operational scalability.
• Mentor and train security operations team members on advanced tools, methodologies, and complex security scenarios.

Required Skills

• 5+ years of experience with IT security technologies including SIEM (Splunk), IDS/IPS, antivirus, and firewalls.
• Hands-on experience with vulnerability assessment tools such as Qualys, Tenable, or Rapid7.
• Direct experience securing AWS Cloud environments and utilizing CSPM solutions.
• Proficiency in Bash Shell and Python scripting.
• Strong understanding of compliance frameworks including NIST, ISO 27001, and SOC 2.
• Proven ability to perform penetration testing and advanced technical troubleshooting.
• Experience leading, training, and mentoring security operations teams.

Preferred Skills

• Bachelor's degree in a related field or equivalent experience.

Key Skills

Education

Any Graduate