Cyber Command Vulnerability Management Specialist
3 weeks ago Be among the first 25 applicants
Get AI-powered advice on this job and more exclusive features.
Job Description
Cyber Command Vulnerability Management Specialist
Brooklyn, NY
Job Overview
The Cyber Command Threat Management division within OTI requires a Vulnerability Management Specialist to serve as a subject matter expert for vulnerability management :
- Research, analyze and brief management and team members on relevant Risk, CVEs, CVSS, Vector Strings, NVD, Mitre, attack vectors and mitigations for various technologies
- Design, architect and build Rapid7 vulnerability management scanning infrastructure and tools
- Manage, configure and conduct Vulnerability Management scans in Rapid7 across various networks
- Conduct vulnerability management analysis through industry research, deep analysis, generating reports and dashboards in Rapid7 to accurately assess and prioritize risk
- Evaluate security vulnerabilities, assess risk and impact, develop mitigation strategies, and implement remediation
- Present succinct technical briefings to team members and customers on intel research, risk assessment, CVEs, vendor hardware / software, industry trends
- Create scripts utilizing Python, PowerShell and others to automate vulnerability management tasks
- Automate detection, reporting and tracking of vulnerabilities identified
- Create deep analysis and reports around vulnerability management utilizing Rapid7 dashboards and reports, scripts, Excel and PowerPoint
- Travel within NYC for various projects when necessary
Mandatory Skills / Experience
Note : Candidates who do not have the mandatory skills will not be considered
At least 8 years of experience in Cybersecurity, including vulnerability management scanning tools, vulnerability assessments, attack surface management, scripting, vulnerability intel analysis, vulnerability management scan result analysis, ExcelStrong knowledge of CVEs, CVSS, Vector Strings, NVD, Mitre, attack vectors and mitigationsExperience with the design, architect and build of vulnerability management scanning infrastructure and tools specifically Rapid7; extensive hands-on experience conducting Rapid7 vulnerability scans across various networks; experience conducting Rapid7 vulnerability management analysis through reports and dashboards to accurately identify riskExperience evaluating security vulnerabilities, assessing risk and impact, developing mitigation strategies, and implementing remediationExperience conducting intel research around CVEs, vendor hardware / software vulnerabilities, and presenting succinct technical overviews to team members and customersExtensive experience with scripting such as Python and PowerShell to automate vulnerability management tasksExtensive experience with Excel, especially for performing data analysis through VLookup and Pivot TablesDesirable Skills / Experience
Provide oral and written reports on vulnerability risk to the team and possibly agencies' technical stakeholdersAbility to evaluate the current threat landscape that includes tactics, techniques and proceduresWork with agencies to evangelize the OTI Cyber Command program around areas of cybersecurity posture enhancement, risk reduction, attack surface management, vulnerability management scanning tool performance, scan results, credentialed scans, triage scan performance issues, socialize risk and remediation, and other vulnerability management issuesExperience using Tableau for reporting and analysis purposesStrong background with next generation firewall products, intrusion detection systems, DMZ, IPSec, DNS, SMTP, HTTP, VPN, proxies, etc.Knowledge of security best practices across multiple platforms, such as Microsoft Windows, VMWare, Linux, VPN, Cisco IOS, and Mobile OS Android / Apple IOS.Knowledge of public-key cryptography, understanding of encoding, encryption, and hashing techniquesKnowledge of security best practices : NIST, CIS, Cisco, Juniper, Palo Alto, Fortinet, Checkpoint, F5, Microsoft, Unix / Linux, etc.Ability to analyze Cybersecurity documentation, including security policies, plans, and procedures.Extensive experience with Windows and Linux ServersExceptional written and oral communication skillsExceptional organizational and analytical skillsCertifications such as CISSP, GSEC, GCIA, GCIH, CEH, CWAPTSeniority level
AssociateEmployment type
Full-timeJob function
Engineering and Information TechnologyReferrals increase your chances of interviewing at Princeton IT Services, Inc by 2x
Sign in to set job alerts for "Software Engineering Specialist" roles.
Want to work with us, but don't see the right job listed?
Don't see the right opportunity? Apply here!
Don't fit another role but want us to consider you? Apply here...
Salary ranges and recent postings are also included, but are not part of the core job description.
J-18808-Ljbffr
