Position: Vulnerability Management Consultant(SME)

Location: Rancho Cucamonga, CA (On-Site)

Duration: Long Term

Key Responsibilities

Vulnerability Assessment: Conduct regular vulnerability assessments and scans across the organization's IT assets, including networks, systems, and applications.
Risk Evaluation: Analyze vulnerability scan results to determine the risk level and potential impact on the organization. Prioritize vulnerabilities based on threat intelligence and business impact.
Remediation Support: Collaborate with IT and security teams to develop and implement remediation plans. Provide guidance and support to ensure timely and effective resolution of identified vulnerabilities.
Threat Intelligence: Stay current with the latest cybersecurity threats, vulnerabilities, and industry trends. Apply this knowledge to improve the organization's vulnerability management practices.
Reporting: Prepare detailed reports on vulnerability assessments, including findings, risk assessments, and remediation status. Communicate these reports to stakeholders in a clear and actionable format.
Policy Development: Assist in the development and refinement of vulnerability management policies and procedures. Ensure alignment with industry best practices and regulatory requirements.
Tool Management: Evaluate, deploy, and manage vulnerability management tools and technologies. Ensure their effective use and integration with other security solutions.
Incident Response: Support the incident response team by providing expertise in identifying and addressing vulnerabilities related to security incidents.
Training & Awareness: Conduct training sessions and awareness programs for staff on vulnerability management and best practices for maintaining a secure environment.

Skills

Proficiency with vulnerability scanning tools (e.g., Nessus, Qualys, Rapid7).
Strong understanding of network security, application security, and operating system security.
Excellent analytical and problem-solving skills.
Strong communication skills, with the ability to present technical information to non-technical stakeholders.
Experience with security frameworks and compliance standards (e.g., NIST, ISO 27001, PCI DSS).
Knowledge: Deep knowledge of current cybersecurity threats, vulnerabilities, and mitigation strategies. Familiarity with regulatory and compliance requirements.

CloudRay jobs

SME