Specialist Vulnerability Management

Key Skills:

Roles and Responsibilities:

• Conduct detailed vulnerability assessments and threat analysis to identify security gaps and potential risks.
• Design and execute remediation strategies to address vulnerabilities and strengthen security posture.
• Collaborate with cross-functional teams (DevOps, Cloud, IT Infrastructure, Application teams) to drive security best practices.
• Perform manual security testing, red teaming exercises, and source code reviews for applications and systems.
• Develop and maintain comprehensive documentation of vulnerabilities, risks, and remediation actions.
• Create and optimize custom scripts and tools for vulnerability detection, reporting, and automation.
• Monitor emerging threats, tools, and attack vectors; evaluate and recommend new technologies to enhance defenses.
• Ensure compliance with industry standards and security frameworks such as OWASP, OSSTMM, PCI DSS, and ISO 27001.
• Promote security awareness initiatives and mentor teams to adopt secure development and operational practices.

Skills Required:

• Strong expertise in Vulnerability Management, Threat Analysis, and Cyber Security principles
• Hands-on experience with Vulnerability Assessment tools (e.g., Tenable, Qualys, Nessus, Rapid7)
• Proficiency in Penetration Testing and Ethical Hacking techniques
• Knowledge of Application Security Testing tools (e.g., Burp Suite, Fortify, AppScan)
• Familiarity with Scripting/Programming languages (Python, PowerShell, Bash, etc.) for automation
• Solid understanding of Operating Systems (Windows, Linux, UNIX) and Networking protocols
• Experience with Security Information and Event Management (SIEM) tools such as Splunk, QRadar, or ArcSight
• Understanding of industry standards/frameworks: OWASP, OSSTMM, PCI DSS, ISO 27001, NIST
• Good knowledge of Cloud Security concepts (AWS, Azure, GCP) and container security (Docker, Kubernetes)
• Strong analytical, troubleshooting, and documentation skills

Education:

• Bachelor's/Master's degree in Engineering/Technology, Computer Science, or a related field
• Preferred certifications: CISSP, CEH, GPEN, OSCP, or equivalent industry-standard certifications