Associate, Vulnerability Assessment

📋 Description

• Operate and assess vulnerability scanning tools (Tenable, Qualys, Nexpose, Prisma Cloud, Burp).
• Provide remediation recommendations for host-based and web application vulnerabilities.
• Conduct manual validation to confirm vulnerability closure.
• Analyze scan data to report credential success, inventory validation, and open vulnerabilities.
• Validate client justifications for vendor dependencies, false positives, and risk adjustments.
• Collaborate to ensure timely delivery of findings and customer satisfaction.

🎯 Requirements

• Less than 2 years of vulnerability assessment experience.
• Experience with a leading vulnerability scan tool (Tenable, Qualys, Nexpose, Prisma Cloud, Burp, etc.).
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent.
• Understanding vulnerability identification, scanning, remediation, and reporting within an organization.
• Deep knowledge of vulnerability management best practices.
• Certifications: Security+, CCSK, AWS Cloud Practitioner or equivalent.

🎁 Benefits

• Familiarity with 3+ frameworks such as FedRAMP, FISMA, SOC, ISO, HIPAA, HITRUST, etc.
• Experience creating system inventories, boundary diagrams, and/or POA&M.
• Familiarity with cloud services such as AWS, GCP, and Azure.
• Familiarity with CIS and STIG configuration baselines.
• Experience with scripting such as Python, Bash, PowerShell.