Vulnerability Assessment Analyst

Software Guidance & Assistance, Inc., (SGA), is searching for a Vulnerability Assessment Analyst for a CONTRACT assignment with one of our premier Financial Services clients in Ft Lauderdale, FL.

Responsibilities:
The Vulnerability Assessments Analyst - Red Team Contractor role will participate in the Adversary Emulation program by assisting with our Special Projects Tiger Team. This team will be performing internal network and application reconnaissance looking for violations and observations and reporting those up for remediation. These contractors are required to assist with a Tiger Team effort in response to a regulatory observation around sensitive data being stored by employees. The contractors will assist with discovery and remediation efforts.

• Support Firm's Red Team in Penetration testing reconnaissance of internal data repositories.
• Conduct searches of electronically stored data to extract relevant data efficiently.
• Prepare data for internal review and reporting.
• Reporting on identified findings.
• Work closely with data and control owners on remediation.
• Demonstratable knowledge of reconnaissance tools and regular expression to identify data.
• Conduct root cause analysis on issues and provide guidance on corrective actions leveraging risk and impact action.
• Reduce risk by analyzing the root cause of issues, their impact, and required corrective actions.
• Assist in assessing risk when making business decisions.
• Other job-related duties may be assigned as required.

Required Skills:

• Bachelor's degree/University degree or equivalent experience
• 1-2 years' experience or equivalent knowledge and exposure are required.
• Regular Expressions
• Scanning Tools
• Data Mining Tools
• Data Repositories (Confluence, Bit Bucket, Github, etc)
• Offensive security testing tools: Cobalt Strike, Red Team Toolkit, etc.
• An understanding of OSI model
• Security devices: Firewalls, VPN, AAA systems
• OS Security: Unix/Linux, Windows, OSX
• Understanding of common protocols: HTTP, LDAP, SMTP, DNS
• Reporting information security vulnerabilities to the business

Preferred Skills:

• Industry-accredited security certifications preferred but not required (e.g., PNPT, OSCP, GXPN, GPEN, GCIH, GWAPT, GCFA)

SGA is a technology and resource solutions provider driven to stand out. We are a women-owned business. Our mission: to solve big IT problems with a more personal, boutique approach. Each year, we match consultants like you to more than 1,000 engagements. When we say let's work better together, we mean it. You'll join a diverse team built on these core values: customer service, employee development, and quality and integrity in everything we do. Be yourself, love what you do and find your passion at work. Please find us at .

SGA is an Equal Opportunity Employer and does not discriminate on the basis of Race, Color, Sex, Sexual Orientation, Gender Identity, Religion, National Origin, Disability, Veteran Status, Age, Marital Status, Pregnancy, Genetic Information, or Other Legally Protected Status. We are committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, and our services, programs, and activities. Please visit our company to request an accommodation or assistance regarding our policy.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.