Description

You will own the end-to-end vulnerability management lifecycle, from discovery and classification to remediation tracking and reporting.

This role is on-site.

Responsibilities

• Conduct regular vulnerability assessments using Qualys, Tenable, Nessus, or Rapid7.
• Collaborate with system owners, infrastructure teams, and developers to remediate identified vulnerabilities.
• Monitor threat intelligence feeds to assess emerging vulnerabilities and respond to CVEs or vendor advisories.
• Develop metrics and reports on vulnerability status, trends, and remediation progress.
• Coordinate periodic penetration testing and ensure compliance with PCI-DSS, ISO 27001, and HIPAA standards.

Required Skills

• 7+ years of professional experience in vulnerability management or information security.
• Hands-on experience with vulnerability scanning tools including Qualys, Nessus, Rapid7, or Tenable.io.
• Strong knowledge of Windows, Linux, and Unix operating systems.
• Deep understanding of network protocols, application architectures, and CVSS scoring.
• Working knowledge of OWASP Top 10 and MITRE frameworks.
• Familiarity with patch management practices and tools.
• Bachelor's degree in Computer Science, Information Security, or a related field.

Preferred Skills

• Scripting experience with Python, PowerShell, or Bash for automation.
• Exposure to cloud environments including AWS, Azure, and GCP.
• Familiarity with SIEM and ticketing systems such as Splunk and ServiceNow.

Key Skills

Education

Bachelor's degree