Vulnerability Threat Management
Onsite 34 days: Mount Laurel NJ or NYC
12 months contract
Our client is seeking a highly skilled Senior Information Security Professional responsible for identifying isolating and resolving advanced threats in the our clients network by actively searching for vulnerabilities and mitigation of cybersecurity risks that affect the organization. This resource will join the Vulnerability Threat Management Team in a senior mission critical capacity as our Vulnerability Threat Management Associate responsible for implementing a proactive approach to identify unknown undetected and nonremediated cyber threats in the clients networks thereby strengthening cybersecurity posture through scanning research threat simulations and threat hunting engagements.
Responsibilities
- Manage the Vulnerability Management program as a leader and subject matter expert from endto end across VM lifecycle.
- Maintain awareness of new and upcoming vulnerabilities and coordinate across teams to determine the impact.
- Develop Threat Model and proactively and iteratively search through systems and networks to detect advanced threats.
- Influence the development of vulnerability management standards and security policies.
- Recommend and assist with development of new security controls to address findings to include signatures alerts workflows and automation.
- Identify security risks threats misconfigurations and vulnerabilities of existing networks systems applications and assist in developing solutions to remediate identified threats.
- Analyze identified malicious network and system log activity to determine weaknesses exploitation methods.
- Establish and drive metrics analytics reporting and a roadmap for continual program improvement through executive summaries and indepth technical reports.
- Develop and maintain automated situational awareness dashboards for leadership and system owners.
- Assist and support the Cybersecurity Operations Manager in incident handling/investigations.
- Coordinate with the client technology engineering and management teams to resolve the cyber threats and patch the security systems.
Required Qualifications
- Proven experience building leading and growing a Vulnerability/Threat Management function.
- Solid working knowledge of use scanning and threat detection technologies such as Endpoint Detection and Response Security Information and Event Management (SIEM) VM scanners and related security and asset tools.
- Broad strong technical expertise in network protocols vulnerability management processes Windows and Linux based systems enterprise network security products.
- Ability to analyze architectural documents.
- Experience consuming and analyzing Cyber Threat Intelligence tools.
- Experience working with various technologies and platforms such as AWS Azure O365 containers etc.
- Understanding current cyber threat landscape the different tactics commonly used by adversaries and how one would investigate contain and recover against their attacks.
- Familiarity with scripting languages such as Python Ruby Shell Bash Perl are a plus.