IT Security Specialist - Vulnerability Analyst

Location: REMOTE Salary: $40.00 USD Hourly - $44.00 USD Hourly Description: Job Title: It Security Specialist - Vulnerability Analyst Location: Remote Job Duration:-6 + Months General Summary: The Vulnerability Management Analyst is a key member of our Threat and Exposure Management team. The team is responsible for Threat and Exposure Management across the organization, and helps with identification, prioritization, remediation, and validation of security exposures. The Vulnerability Management Analyst will be responsible for scoping, scheduling, scanning, and working with the teams to help remediate any vulnerabilities and misconfigurations identified. The Analyst will help mature our Threat and Exposure management program and collaborate with teammates, IT professionals, Infrastructure and Application representatives across the enterprise to identify new threats, discover vulnerabilities and use that information to reduce risk and improve our security posture. Primary Responsibilities: • Manage the life cycle of vulnerabilities from discovery, triage, prioritizing, advising, remediation, and validation. • Improve and automate the existing vulnerability management lifecycle. • Work with the business teams to effectively communicate the risks of identified vulnerabilities and make recommendations regarding the selection of cost-effective security controls to mitigate identified risks. • Maintain and administer vulnerability management platforms. • Perform reoccurring and on demand scanning activities of both corporate and cloud environments utilizing enterprise platform. • Provide support and resolution for scanning and vulnerability remediation reporting issues. • Send out weekly and monthly vulnerability reports to the various teams. Job Complexity • Ability to assess newly identified vulnerabilities, determine exposure, investigate solutions, and recommend controls to minimize risks that could arise. • Ability to create effective reports and presentations tailored to different audiences to ensure transparency and understanding of the program. • Ability to troubleshoot issues with credentialed network scans and vulnerability assessment issues with system administrators. • Ability to identify systemic security issues based on the analysis of vulnerability and configuration data. • Ability to effectively communicate risk including corrective action plans/recommendations to non-technical audiences. • Ability to build operational processes using industry best-practice that are tailored to client’s organization, system, and processes. Required Skills: • Knowledge of cyber threats and vulnerabilities. • Experience in automation (Python, PowerShell, Power Automate, API’s). • Experience with the following platforms – Vulnerability Management (VM), Web Application Scan (WAS), External Attack Surface Management (EASM), Cloud Security Posture Management (CSPM), SaaS Security Posture. • Skill in conducting vulnerability scans and recognizing vulnerabilities/misconfigurations in security systems and web applications. Skill in conducting application vulnerability assessments. • Ability to sift through large data to prioritize impactful vulnerabilities and reduce noise often associated with vulnerability tools. • Stays up to date with current vulnerabilities and vulnerabilities related news in various industries. • Experience working with Windows, Mac, Linux and/or other Unix-like variants. • Demonstrated strong knowledge of networks, desktops, servers, cloud and software as a service technology. • Knowledge of cloud platforms, dynamic cloud environments, and cloud security. Additional Desired Skills: • Experience with Unified Vulnerability Management Platforms • Ability to automate and script tasks using your preferred language (e.g., Python,) • Ability to write scripts against common web APIs (REST, SOAP). By providing your phone number, you consent to: (1) receive automated text messages and calls from the Judge Group, Inc. and its affiliates (collectively "Judge") to such phone number regarding job opportunities, your job application, and for other related purposes. Message & data rates apply and message frequency may vary. Consistent with Judge's Privacy Policy, information obtained from your consent will not be shared with third parties for marketing/promotional purposes. Reply STOP to opt out of receiving telephone calls and text messages from Judge and HELP for help. Contact: [email protected] This job and many more are available through The Judge Group. Find us on the web at www.judge.com Remote About the Company: Judge Group The Judge Group Inc., is a leading professional services firm specializing in talent, technology, and learning solutions. We consult, staff, train, and solve. Through our work we make people and organizations better. Our services are successfully delivered through a network of more than 30 offices across the United States, Canada, and India. The Judge Group is proud to partner with the best and brightest companies in business today, including over 60 of the Fortune 100. We serve organizations in financial services, healthcare, life sciences, insurance, government (including aerospace and defense), manufacturing, and technology and telecommunications. If you would like to learn more about The Judge Group visit www.judge.com or call toll free (800) 360-4474. Company Size: 5,000 to 9,999 employees Industry: Computer/IT Services Founded: 1970 Website: Apply tot his job