Vulnerability Management Analyst

Vulnerability Management Analyst

1+ Year Contract

REMOTE

(4753)

IMMEDIATE NEW JOB OPENING for a Vulnerability Management Analyst to join our team and work remotely for our global client. In this role, you will be responsible for performing the day-to-day operations of the Vulnerability Management program.

Responsibilities:

• Monitor, evaluate, and maintain systems and procedures to safeguard internal information systems, network, databases, and Web-based security.
• Conduct vulnerability assessments and monitor systems, network, databases, and Web for vulnerabilities.
• Respond to alerts from information security tools.
• Report, investigate and work with support team to resolve vulnerabilities.
• Educate and communicate security requirements and procedures to users and new employees.
• Recommend and implement changes to enhance systems security and prevent unauthorized access.
• Research and keep abreast of security trends, new methods, and techniques used in unauthorized access of data to preemptively eliminate the possibility of system breach.
• Ensure compliance with regulations and privacy laws.
  Responsible for vulnerability identification, analysis, communication, and remediation.
• Acts as main point of contact and articulate vulnerability complexity and remediation strategies to partners.
• Responsible for collecting, processing, monitoring, and dissemination of security vulnerabilities as well as potential threat to the environment.
• Run and support vulnerability management scans across all the systems and work with support teams to solve and fix issues as they arise.
• A passion and proven ability to drive security that is frictionless, collaborative, and effective.
• Develop working partnerships with business and system owners to ensure systems are effectively scanned and remediated.
• Partner with each functional area to overlay vulnerability data with system knowledge to identify where compensating controls or deep system knowledge can be applied to lower the effective risk.
• Compile vulnerability metrics/Key Performance Indicators and regular reporting mechanisms for measuring compliance of vulnerability management projects.
• Validate proper mitigation controls are in place until remediation activities are complete.
  Conduct research and evaluate the risk of the latest threat intel, vulnerabilities, and exploits to our environment.
• Provide and demonstrate strong leadership, and organizational abilities applied across a large team with diverse skills, good communicator, and team player.

Requirements:

• 5+ years of Information Security/Vulnerability Management experience.
• Experience with threat intelligence, specifically pertaining to the evaluation of the risk to the enterprise as well as CVSS calculations to understand vulnerable and impacted components.
• Experience with Enterprise vulnerability management tools Qualys Vulnerability Management suite is a must.
• Experience with Qualys Cloud Agent, Qualys API, Qualys Policy compliance and Qualys PCI module and Qualys Detection Score.
• Experience in AWS and Alibaba cloud environments and capabilities as well as understanding of container vulnerability management process.
• Experience with SQL Server Management Studio and writing SQL queries, to drive analysis of vulnerability data and answer data questions as they arise.
• Experience solving firewall issues preventing vulnerability management scanners from reaching their targets, or issues preventing Qualys Agents from checking-in to the Qualys platform.
• Experience with typical scripting and/or programming languages such as Groovy Script, Regular Expressions, PowerShell, Python, VBA, JavaScript, and SQL.
• Must be able to run SQL queries.
• Strong written and verbal communication skills with the ability to collaborate across functions.

**To view all of our open positions, please visit our Alleare Consulting website.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.