Description

You will manage the end-to-end vulnerability management lifecycle, including discovery, classification, prioritization, and remediation tracking.

Responsibilities

• Conduct regular vulnerability assessments using tools such as Qualys, Tenable, Nessus, or Rapid7.
• Collaborate with system owners, infrastructure teams, and developers to remediate identified vulnerabilities.
• Monitor threat intelligence feeds to assess emerging vulnerabilities and respond to CVEs or vendor advisories.
• Develop metrics and reports on vulnerability status, trends, and remediation progress.
• Coordinate periodic penetration testing and ensure compliance with internal policies and regulatory standards like PCI-DSS, ISO 27001, and HIPAA.

Required Skills

• 7+ years of professional experience in vulnerability management or information security.
• Hands-on experience with vulnerability scanning tools including Qualys, Nessus, Rapid7, or Tenable.io.
• Strong knowledge of Windows, Linux, and Unix operating systems.
• Deep understanding of network protocols, application architectures, and CVSS scoring.
• Working knowledge of OWASP Top 10 and MITRE frameworks.
• Familiarity with patch management practices and tools.
• Bachelor's degree in Computer Science, Information Security, or a related field.

Preferred Skills

• Scripting experience with Python, PowerShell, or Bash for automation.
• Exposure to cloud environments including AWS, Azure, and GCP.
• Familiarity with SIEM and ticketing systems such as Splunk and ServiceNow.
• Security certifications such as CEH, OSCP, CompTIA Security+, or GIAC.

Key Skills

Education

Bachelor's degree