Sr. Vulnerability Management Operations Specialist

Summary

Sr. Vulnerability Management Operations SpecialistA client is looking for a Sr. Vulnerability Management Operations Specialist for an on-site, contract-to-hire opportunity. The client is a large, regional bank and the VM Operations Specialist will be joining the Threat and Vulnerability Management Operations team. The team is made up of engineers and operations, where engineering is scanning for vulnerabilities, doing penetration testing, etc. The output gets fed into the tool and from there the operations team creates reporting, investigations, metrics, etc.The Sr. Vulnerability Management Operations Specialist will work closely with various technology teams (server teams, work station teams, application teams, etc.) to understand the vulnerabilities in their space, ensure they are monitoring them, and ensuring those teams are prioritizing the riskiest vulnerabilities and remediating. This includes both meeting with the teams and ongoing support of those teams from a vulnerability education perspective.The Cybersecurity Application Security Analyst analyzes the security of applications in tandem with their underlying services. Application security engineers are constantly scanning applications for vulnerabilities, presenting the results to the application teams, and advising on resolutions before the vulnerabilities can be exploited. The Expert analyst combines automated tools with manual testing to validate vulnerabilities and must have a strong technical knowledge of the vulnerabilities found, as well as how to remediate and defend against them.Primary Responsibilities:Perform vulnerability scanning and Review findings with Application Teams as well as document the security findings.Drive security efficiencies through automation, enabling security team members to work on more advanced tasks.Actively participate and lead security team meetings that facilitate secure design.Train developers and junior application security engineers on weaknesses to avoid.Regularly monitor the security community for public-facing security issues, as well as to learn new tactics that can be used in testing.Use security standards and implementation configurations, as well as common security frameworks to improve the program.

Job Description

Sr. Vulnerability Management Operations SpecialistA client is looking for a Sr. Vulnerability Management Operations Specialist for an on-site, contract-to-hire opportunity. The client is a large, regional bank and the VM Operations Specialist will be joining the Threat and Vulnerability Management Operations team. The team is made up of engineers and operations, where engineering is scanning for vulnerabilities, doing penetration testing, etc. The output gets fed into the tool and from there the operations team creates reporting, investigations, metrics, etc.The Sr. Vulnerability Management Operations Specialist will work closely with various technology teams (server teams, work station teams, application teams, etc.) to understand the vulnerabilities in their space, ensure they are monitoring them, and ensuring those teams are prioritizing the riskiest vulnerabilities and remediating. This includes both meeting with the teams and ongoing support of those teams from a vulnerability education perspective.The Cybersecurity Application Security Analyst analyzes the security of applications in tandem with their underlying services. Application security engineers are constantly scanning applications for vulnerabilities, presenting the results to the application teams, and advising on resolutions before the vulnerabilities can be exploited. The Expert analyst combines automated tools with manual testing to validate vulnerabilities and must have a strong technical knowledge of the vulnerabilities found, as well as how to remediate and defend against them.Primary Responsibilities:Perform vulnerability scanning and Review findings with Application Teams as well as document the security findings.Drive security efficiencies through automation, enabling security team members to work on more advanced tasks.Actively participate and lead security team meetings that facilitate secure design.Train developers and junior application security engineers on weaknesses to avoid.Regularly monitor the security community for public-facing security issues, as well as to learn new tactics that can be used in testing.Use security standards and implementation configurations, as well as common security frameworks to improve the program.