VM Specialist

Position Overview

We are looking for a knowledgeable Vulnerability Management Specialist with over four years of experience, preferably in large-scale ICT environments focused on information and cyber security. The specialist will oversee comprehensive vulnerability assessments across the enterprise, spearhead risk-driven mitigation strategies, and elevate the organization's security framework.

Educational and Certification Requirements

• Bachelor's degree in engineering, computer science, information systems, or other quantitative disciplines.
• Certifications required include CompTIA Security+, EC-Council Certified Ethical Hacker (CEH), and Tenable VM Specialist.

Primary Responsibilities

• Conduct routine vulnerability scans with Tenable Security Center across all enterprise systems.
• Set up and fine-tune scanning configurations including policies, schedules, repositories, and scan zones.
• Execute both authenticated and unauthenticated vulnerability assessments and verify results.
• Examine vulnerabilities considering CVSS scores, exploit potential, threat intelligence, and asset importance.
• Create risk-based prioritization strategies and corresponding remediation roadmaps.
• Work jointly with infrastructure, cloud, application, and security teams to facilitate remediation efforts.
• Monitor remediation SLAs and generate executive-level dashboards and reports.
• Assist in audits and compliance related to ISO 27001, NIST, CIS, and PCI-DSS standards.
• Drive continuous enhancements of vulnerability management procedures and automation.

Skills and Expertise

• Proficiency with Tenable Security Center (Tenable.sc) and vulnerability management lifecycle.
• Familiarity with CVE, CVSS, CWE, and MITRE ATT&CK frameworks.
• Experience managing vulnerabilities in Windows, Linux, network, cloud, and virtualized platforms.
• Strong analytical capabilities along with reporting and stakeholder engagement skills.