Description

You will own the security assessment and vulnerability management lifecycle for market-deployed products.

Responsibilities

• Execute annual risk assessments, document findings, and relay results to development teams.
• Facilitate annual penetration tests and develop or assess final reports.
• Master SBOM generation using various tools and scripts to analyze results.
• Assess security updates for impact on deployed products and track emerging vulnerabilities.
• Prepare software for SAST, DAST, and fuzzing evaluations to formulate remediation strategies.
• Deploy image hardening protocols including DISA STIGs implementation.
• Compile product risk summaries for semi-annual stakeholder reporting.

Required Skills

• 5+ years of professional experience in cybersecurity.
• Proficiency in Microsoft development environment scripting, specifically PowerShell.
• Deep knowledge of Windows OS services, processes, driver configurations, and registry settings.
• Understanding of both Windows and Linux cybersecurity configurations.
• Hands-on experience with SAST, DAST, SBOM, fuzzing, and network forensics tools.
• Experience with standard penetration testing applications and networking.
• Familiarity with Microsoft Visual Studio, ADO, or comparable IDEs.
• Understanding of SDLC methodologies including Agile and Scrum.
• Strong ability to communicate across virtual and asynchronous work environments.

Key Skills

Education

Any Graduate