Requirements:
- 3 years in vulnerability assessments and/or penetration testing including patching
- 2 years combined solid experience in one of the major V.M Scanners (Qualys, Tennable, Rapid7)
- Experience and knowledge of PMP and other patch management tools
- Solid Knowledge of CVSS, OWASP Top 10
- Knowledge and experience integrating threat feeds into various systems
- Experience with scripting with any of the following: Python, Ruby, Shell, Bash, Perl
- Relevant Certifications such as CISSP or CISSP-ISSMP
- Ability to adapt and work collaboratively
- Managing the end-to-end vulnerability lifecycle
- Performing in-depth workstation and server patching and vulnerability test
- Performing and reporting on vulnerability scans and other detection systems
- Preparing patched system updated to stakeholder daily
- Developing Maintenance program for threat and V.M tools
- Developing threat Models, Risk Taxonomy
- Maturing current KRI’s and KPI’s in conjunction with responsible bodies
- Working with various groups to conduct ad hoc penetration testing and assist Information Security and Audit as needed in their testing
- Responding to detected threats and review from Audit and Information Security team