IT Vulnerability Management Engineer job vacancy

Vacancy expired!

Responsibilities:

Performs discovery scanning via the Vulnerability Management Platform (scheduled and ad-hoc)
Provides gap analysis to compare the list of known resources so gaps can be investigated and owners identified
Identifies resource types (e.g. router, desktop computer, server, network switch, firewall, etc.), operating systems, and whether active services are "Enterprise" level
Tracks via remediation management system and provides a wiki-style format to capture recommendation, analysis and facts, and links to other research
Researches vulnerabilities to determine attack vectors and possible vulnerable targets and launches specific scans and reports for that vulnerability in VM scanning tool(s).
Coordinates with business, IT teams, and Technology Risk Management (TRM) to remediate compliance findings in a timely manner while addressing risk reduction objectives
Defines, manages, and measures security configuration baselines in line with internal policies/standards and CIS benchmarks
Defines and manages cloud specific technical security policies (CSA security guidance

Requirements:

3 years of hands-on technical security engineering experience
Certifications: CISSP, CISM, CISA, CEH, GCIH, GSEC, GCFA, GREM, CCENT
Ability to install, configure, troubleshoot, and administer VM Platform(s). (Ex.Tanium, Tenable, Coverity, Brinqa, etc.)
Experience with Tanium programming or creating custom configurations within Tanium
Experience with dynamic and static code analysis experience (e.g. QualysWAS, SAST tools, Tenable)
Experience with security configuration checklists (e.g. CIS Benchmarks and CSA security guidance)
Familiarity with NIST Special Publications (e.g. 800-171,800-53, CSF)
Familiarity with PCI DSS Compliance standards and scanning practices
Ability to configure and use technical assessment tools such as Tanium Comply and Tenable Nessus

Education: