Sr. Vulnerability Management Operations Specialist

Job Description

A client is looking for a Sr. Vulnerability Management Operations Specialist for an on-site, contract-to-hire opportunity. The client is a large, regional bank and the VM Operations Specialist will be joining the Threat and Vulnerability Management Operations team. The team is made up of engineers and operations, where engineering is scanning for vulnerabilities, doing penetration testing, etc. The output gets fed into the tool and from there the operations team creates reporting, investigations, metrics, etc.

The Sr. Vulnerability Management Operations Specialist will work closely with various technology teams (server teams, work station teams, application teams, etc.) to understand the vulnerabilities in their space, ensure they are monitoring them, and ensuring those teams are prioritizing the riskiest vulnerabilities and remediating. This includes both meeting with the teams and ongoing support of those teams from a vulnerability education perspective.

The Cybersecurity Application Security Analyst analyzes the security of applications in tandem with their underlying services. Application security engineers are constantly scanning applications for vulnerabilities, presenting the results to the application teams, and advising on resolutions before the vulnerabilities can be exploited. The Expert analyst combines automated tools with manual testing to validate vulnerabilities and must have a strong technical knowledge of the vulnerabilities found, as well as how to remediate and defend against them.

Primary Responsibilities:

• Perform vulnerability scanning and Review findings with Application Teams as well as document the security findings.
• Drive security efficiencies through automaton, enabling security team members to work on more advanced tasks.
• Actively participate and lead security team meetings that facilitate secure design.
• Train developers and junior application security engineers on weaknesses to avoid.
• Regularly monitor the security community for public-facing security issues, as well as to learn new tactics that can be used in testing.
• Use security standards and implementation configurations, as well as common security frameworks to improve the program.

Skills and Requirements

o Minimum 5-7 years’+ experience in Cybersecurity o 3+ years' experience in cyber application security (including knowledge in common app vulnerabilities and remediation/defense strategies) o Strong background in Linux servers o Strong background in Windows servers o Strong background in networking o Experience in Cloud environments (AWS, Azure or GCP) o Extremely strong communication: able to work with cross-functional teams and influence o Self-starter o Strong prioritization skills o Experience with Python programming o Cloud Security knowledge o Experience with tools like Qualys or Prisma o Certifications: Security+, CISSP

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].