Vulnerability Management Expert

Job Description

To operate securityservice for vulnerability assessment. To execute security assessments on technical devices and systems of the company to highlight risks to business. To create detailed reports and hand themover forsolution. To proactively discover vulnerabilities and ensure mitigation actions are implemented in the defined time schedule. Drive implementation/onboarding of new scanners and regularly report status, produce relevant management information to key stakeholders. To manage and oversee all vulnerability management projects, push vulnerability remediation, ensure to meet all defined SLAs and KPIs for the services provided by the teams. Manage & administrate security scanners & ensure effective controls are in place to detect vulnerabilities across Vodafone infrastructure, services and applications.Key accountabilities and decision ownership:Impact on the businessExecutes securityassessments to highlight and clearly articulate risk to the business.Participates in the scope definition of security scanning and VA scanners managementActs as primary technical subject matter expert for security scanning.Accountable for the overall scanning infrastructure, scanning execution, quality of work and deliverables.Proactively discovers vulnerabilities in Vodafone environments and ensure mitigation actions are implementedContinuously develops security assessment services and processes.Performs vulnerability research to identify new, previously unknown and unpublished vulnerabilities.Creates detailed technical reports about Vulnerability scanning and hands findings over to resolver teams; responds to technical queries related to the reports and findings.Tracks the work of the resolver team. Follows up remediation actions with the local IT security managers.Collaborate with infrastructure andapplication owners on security hot-fixes.Support the cyber incident response team in specified vulnerability discovery and identification tasks during crisis management.Coordinatewith stakeholders to develop requirements for service enhancementsResearch about new zero day vulnerabilities, exploitation techniques and ensure scans are targeted to identify the new vulnerabilities in Vodafone environment and recommend appropriate mitigation actions are initiatedDocuments SOP, KEDB, processes and procedures.Manually validates vulnerabilities reported by automated vulnerability scanners.Integrate findings across infrastructure, to provide a holistic security posture forassetsCommunicationGood communication skills in order to drive the various operationally required communication processes within the VM Security InfrastructureCore competencies, knowledge andexperience:6+ years relevant experience invulnerability scanner management & Vulnerability assessment andMust have skill set in using tools like RAPID 7 Nexpose & Tripwire scanner management and security scanningIndustry recognized security certifications like CEH - Ethical Hacking CertificationExperience in few of the technologies Qualys, Retina, ACUNETIX, Nessus, Open VAS - scanning tools, Penetration testing tools, Metaspolit framework, NMAP, NagiosShould have experience in Operating systems like Linux, Windows, web application, Virtualisation-VMWARE, network/ infrastructure security and assessmentsKnowledge on OWASP, Sandbox, Kali Linux, Burp suite, CVE, SSL PKI,2FA, IAM, Perimeter security, SIEM solutions.Experience in compiling VAPT reports, penetration testing test environmentsNot mandatory but good to have knowledge on penetrationtesting and toolsMust have technical / professional qualifications:Degree in Computer Science/ Information Technology/ Engineering or similarPrior experience as VAPT operations /engineeringPrior experience in Vulnerability scanner management, Vulnerabilityassessment.Good knowledge in Networking and security conceptsExperience of global customer handlingA reputation for self-motivation, integrity, cultural sensitivity and strong interpersonal skillsMust have technical / professional qualifications:Degree in Computer Science/ Information Technology/ Engineering or similarPrior experience as VAPT operations /engineeringPrior experience in Vulnerability scanner management, Vulnerability assessment.Good knowledge in Networking and security conceptsExperience of global customer handlingA reputation for self-motivation, integrity, cultural sensitivity and strong interpersonal skills,

Keyskills :
perating systems testing tools technical subject matter ethical hacking it security