Job description

Position Title: Vulnerability Management and Security Baseline Compliance (SBC) Operations
Job location (City, State) – Midtown, New York City
Duration for this position: 6 months but extendable
Immigration status restrictions: USC, GC, H1B

Job description:

Vulnerability Management and Security Baseline Compliance (SBC) Operations:

MUST HAVE:

• Experienced with Vulnerability lifecycle management
• Hands on experience with Rapid7/Nexpose
• Skill in conducting vulnerability scans and recognizing vulnerabilities in security systems

• The SOW FTEs will support Customer in their daily operational activities for their vulnerability management program.
• The Supplier will conduct the following activities in accordance with specifications agreed with Customer:
• Support Customer in performing a monthly data analysis (delta investigation) to compare asset discover scan results against configuration management database (CMDB) data to identify potential assets that are not being scanned
• Work with Customer to fix any assets identified as part of the delta investigation by updating the scan scope or purging the asset
• Support Customer in performing pre-scan and post scan checks to
• Scanner health check (i.e. scanners are working)
• CMDB coverage count (delta investigation)
• Number of vulnerabilities detected
• Validate authentication records are configured or updated appropriately
• False positive analysis of vulnerability scans on regular basis
• Scan diagnosis to validate the number of assets where authentication scans are failing
• Support Customer in running the automated vulnerability scans on a weekly basis
• Support Customer in vulnerability remediation and reporting process:
• Leveraging existing scan knowledge base for categorization of vulnerabilities by criticality
• Identify top 25 vulnerabilities based on scan knowledge base and technology
• Setup a monthly meeting with all stakeholders to share the vulnerability report and top 25 vulnerabilities identified upon discussion
• Help create tickets for the vulnerabilities by asset/vulnerability
• Perform a monthly data comparison from prior vulnerability scans to identify vulnerabilities that have not been remediated within the 90-day timeline
• Escalate to Customer Project Team when vulnerabilities are not remediated within 90 days
• Facilitate governance calls with related teams to monitor the vulnerability remediation compliance
• Support in documenting asset exceptions to vulnerability management
• Work with asset owners to document false positives where vulnerabilities have already been remediated but scans are still reporting vulnerabilities
• Support in initiating potential emergency remediation activities on Customer and/or vendor-initiated threat advisories
• Assess Customer vulnerability management inherent risk assessment criteria and recommend any applicable improvements to final vulnerability management residual risk rating
• Review and assess patch management guidelines for suitability against risk in line with industry standard best practice
• Support Customer in performing (SBC) – Security Baseline Compliance Reporting and checks;
• Inclusive of assisting customer with SBC fixes
• On-boarding SBC checks for new technologies
• Assisting in configuration of custom policies

Job Type: Contract

Salary: Up to $85.00 per hour

Schedule:

• 8 hour shift

Ability to commute/relocate:

• Midtown, TN: Reliably commute or planning to relocate before starting work (Required)

Experience:

• Information security: 1 year (Preferred)
• Network security: 1 year (Preferred)
• Software deployment: 1 year (Preferred)

License/Certification:

• CISSP (Preferred)
• ITIL Certification (Preferred)

Work Location: One location

Speak with the employer
+91 +14085716809

blackflymedia.com is the go-to platform for job seekers looking for the best job postings from around the web. With a focus on quality, the platform guarantees that all job postings are from reliable sources and are up-to-date. It also offers a variety of tools to help users find the perfect job for them, such as searching by location and filtering by industry. Furthermore, blackflymedia.com provides helpful resources like resume tips and career advice to give job seekers an edge in their search. With its commitment to quality and user-friendliness, blackflymedia.com is the ideal place to find your next job.